Skip to content

Commit

Permalink
fix cosign signing issue
Browse files Browse the repository at this point in the history
we don't need experimental anymore, we are using latest cosign here.

Signed-off-by: kranurag7 <[email protected]>
  • Loading branch information
kranurag7 committed Jul 30, 2024
1 parent 1af944e commit 1c08543
Showing 1 changed file with 1 addition and 3 deletions.
4 changes: 1 addition & 3 deletions .github/workflows/publish.yml
Original file line number Diff line number Diff line change
Expand Up @@ -55,16 +55,14 @@ jobs:

- uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
- name: Push chart to GHCR
env:
COSIGN_EXPERIMENTAL: 1
run: |
shopt -s nullglob
for pkg in .cr-release-packages/*; do
if [ -z "${pkg:-}" ]; then
break
fi
helm push "${pkg}" oci://ghcr.io/"${GITHUB_REPOSITORY_OWNER}"/charts |& tee .digest
cosign sign $(cat .digest | awk -F "[, ]+" '/Pushed/{print $NF}')
cosign sign --yes $(cat .digest | awk -F "[, ]+" '/Pushed/{print $NF}')
done
- uses: oras-project/setup-oras@ca28077386065e263c03428f4ae0c09024817c93 # v1
with:
Expand Down

0 comments on commit 1c08543

Please sign in to comment.