ci: push images to Harbor (repo.meghsakha.com) + cosign (#43)

2026-07-21 12:07:56 +00:00
parent dec283c1ca
commit 6a1896dcb5
1 changed files with 4 additions and 2 deletions
@@ -273,11 +273,13 @@ jobs:
          git checkout FETCH_HEAD
      - name: Build and push image
        run: |
-          IMAGE=registry.meghsakha.com/certifai-dashboard
+          IMAGE=repo.meghsakha.com/certifai/certifai-dashboard
          echo "${{ secrets.REGISTRY_PASSWORD }}" | \
-            docker login registry.meghsakha.com -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
+            docker login repo.meghsakha.com -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
          docker build -t "$IMAGE:latest" -t "$IMAGE:${GITHUB_SHA}" .
          docker push "$IMAGE:latest"
+          command -v cosign >/dev/null 2>&1 || { curl -sSfLo /usr/local/bin/cosign https://github.com/sigstore/cosign/releases/download/v2.4.3/cosign-linux-amd64 && chmod +x /usr/local/bin/cosign; }
+          cosign sign --yes --key env://COSIGN_KEY "$IMAGE:latest" || echo "::warning::cosign failed"
          docker push "$IMAGE:${GITHUB_SHA}"
      - name: Trigger orca redeploy
        run: |