shiyue/kan
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: prevent sig from taking the latest tag

Browse Source
This commit is contained in:
Henry
2025-06-07 23:46:10 +01:00
parent d768b1e6ba
commit 8474601b2e
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/docker-publish.yml vendored
View File

@@ -99,4 +99,5 @@ jobs:
DIGEST: ${{ steps.build-and-push.outputs.digest }} DIGEST: ${{ steps.build-and-push.outputs.digest }}
# This step uses the identity token to provision an ephemeral certificate # This step uses the identity token to provision an ephemeral certificate
# against the sigstore community Fulcio instance. # against the sigstore community Fulcio instance.
run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST} run: |
echo "${TAGS}" | grep -v "latest" | xargs -I {} cosign sign --yes {}@${DIGEST}