platform/portal
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

ci: fix cosign signing (install fallback, env-style login, portal sign step) #18

Merged
sharang merged 1 commits from ci/cosign-fixes into main 2026-07-22 07:46:03 +00:00
Conversation 0 Commits 1 Files Changed 1
+5
sharang commented 2026-07-22 07:44:21 +00:00
Owner
Copy Link
Copy Source

Fixes three cosign/CI bugs from the Harbor cutover: (1) cosign install used curl, absent in the docker:cli build containers -> 'curl: not found', now curl-or-wget and fully ::warning::-guarded so it can never fail a build; (2) [certifai + compliance-scanner-agent] docker login interpolated the robot username inline — sh expands the '$' in robot$ci-push to 'robot-push' -> unauthorized (this also hard-failed the Deploy Docs job); creds now flow via env. COSIGN_KEY/COSIGN_PASSWORD env was also missing (the injector skipped workflows that already had a top-level env block); (3) [portal] the sign step was never injected (portal uses docker/build-push-action, not a raw docker push) — added it, so portal images finally get signed.

Fixes three cosign/CI bugs from the Harbor cutover: (1) cosign install used curl, absent in the docker:cli build containers -> 'curl: not found', now curl-or-wget and fully ::warning::-guarded so it can never fail a build; (2) [certifai + compliance-scanner-agent] docker login interpolated the robot username inline — sh expands the '$' in robot$ci-push to 'robot-push' -> unauthorized (this also hard-failed the Deploy Docs job); creds now flow via env. COSIGN_KEY/COSIGN_PASSWORD env was also missing (the injector skipped workflows that already had a top-level env block); (3) [portal] the sign step was never injected (portal uses docker/build-push-action, not a raw docker push) — added it, so portal images finally get signed.
sharang added 1 commit 2026-07-22 07:44:22 +00:00
ci: fix cosign install (curl->wget fallback), env-style registry login, portal sign step
ci / test (pull_request) Successful in 10m20s
Details
ci / shared (pull_request) Failing after 5s
Details
ci / image (pull_request) Skipped
Details
ci / e2e (pull_request) Canceled after 0s
Details
a3c1bb075c
sharang merged commit da6b8f70c5 into main 2026-07-22 07:46:03 +00:00
sharang deleted branch ci/cosign-fixes 2026-07-22 07:46:03 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
Benjamin_Boenisch sharang (Sharang Parnerkar)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: platform/portal#18