diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 365ac709b..924e5dd6e 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -78,7 +78,9 @@ jobs: uses: sigstore/cosign-installer@main with: cosign-release: 'v0.2.0' - run: | + + # Use cosign to sign the images + - run: | export KMS_VAL=gcpkms://projects/kaniko-project/locations/global/keyRings/cosign/cryptoKeys/cosign cosign sign -kms $KMS_VAL gcr.io/kaniko-project/executor:${{ env.GITHUB_SHA }}-slim cosign sign -kms $KMS_VAL gcr.io/kaniko-project/executor:${{ steps.vars.outputs.tag }}-slim @@ -149,7 +151,9 @@ jobs: uses: sigstore/cosign-installer@main with: cosign-release: 'v0.2.0' - run: | + + # Use cosign to sign the images + - run: | export KMS_VAL=gcpkms://projects/kaniko-project/locations/global/keyRings/cosign/cryptoKeys/cosign cosign sign -kms $KMS_VAL gcr.io/kaniko-project/executor:${{ env.GITHUB_SHA }}-debug cosign sign -kms $KMS_VAL gcr.io/kaniko-project/executor:${{ steps.vars.outputs.tag }}-debug @@ -215,7 +219,9 @@ jobs: uses: sigstore/cosign-installer@main with: cosign-release: 'v0.2.0' - run: | + + # Use cosign to sign the images + - run: | export KMS_VAL=gcpkms://projects/kaniko-project/locations/global/keyRings/cosign/cryptoKeys/cosign cosign sign -kms $KMS_VAL gcr.io/kaniko-project/warmer:${{ env.GITHUB_SHA }} cosign sign -kms $KMS_VAL gcr.io/kaniko-project/warmer:${{ steps.vars.outputs.tag }}