Merge pull request 'ci: fix cosign signing (install fallback, env-style login, portal sign step)' (#18) from ci/cosign-fixes into main
This commit was merged in pull request #18.
This commit is contained in:
@@ -137,6 +137,11 @@ jobs:
|
|||||||
tags: |
|
tags: |
|
||||||
repo.meghsakha.com/breakpilot/portal:latest
|
repo.meghsakha.com/breakpilot/portal:latest
|
||||||
repo.meghsakha.com/breakpilot/portal:sha-${{ github.sha }}
|
repo.meghsakha.com/breakpilot/portal:sha-${{ github.sha }}
|
||||||
|
- name: sign image (cosign)
|
||||||
|
run: |
|
||||||
|
{ command -v cosign >/dev/null 2>&1 || curl -sSfLo /usr/local/bin/cosign https://github.com/sigstore/cosign/releases/download/v2.4.3/cosign-linux-amd64 || wget -qO /usr/local/bin/cosign https://github.com/sigstore/cosign/releases/download/v2.4.3/cosign-linux-amd64; } || echo "::warning::cosign fetch failed"
|
||||||
|
chmod +x /usr/local/bin/cosign 2>/dev/null || true
|
||||||
|
cosign sign --yes --key env://COSIGN_KEY repo.meghsakha.com/breakpilot/portal:latest || echo "::warning::cosign failed"
|
||||||
- name: trigger orca redeploy
|
- name: trigger orca redeploy
|
||||||
# Signs the POST with HMAC-SHA256 over the JSON body using the
|
# Signs the POST with HMAC-SHA256 over the JSON body using the
|
||||||
# secret orca generated when the webhook was registered. Orca's
|
# secret orca generated when the webhook was registered. Orca's
|
||||||
|
|||||||
Reference in New Issue
Block a user