ci: push images to Harbor (repo.meghsakha.com) + cosign (#43)
This commit was merged in pull request #43.
This commit is contained in:
@@ -273,11 +273,13 @@ jobs:
|
|||||||
git checkout FETCH_HEAD
|
git checkout FETCH_HEAD
|
||||||
- name: Build and push image
|
- name: Build and push image
|
||||||
run: |
|
run: |
|
||||||
IMAGE=registry.meghsakha.com/certifai-dashboard
|
IMAGE=repo.meghsakha.com/certifai/certifai-dashboard
|
||||||
echo "${{ secrets.REGISTRY_PASSWORD }}" | \
|
echo "${{ secrets.REGISTRY_PASSWORD }}" | \
|
||||||
docker login registry.meghsakha.com -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
|
docker login repo.meghsakha.com -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
|
||||||
docker build -t "$IMAGE:latest" -t "$IMAGE:${GITHUB_SHA}" .
|
docker build -t "$IMAGE:latest" -t "$IMAGE:${GITHUB_SHA}" .
|
||||||
docker push "$IMAGE:latest"
|
docker push "$IMAGE:latest"
|
||||||
|
command -v cosign >/dev/null 2>&1 || { curl -sSfLo /usr/local/bin/cosign https://github.com/sigstore/cosign/releases/download/v2.4.3/cosign-linux-amd64 && chmod +x /usr/local/bin/cosign; }
|
||||||
|
cosign sign --yes --key env://COSIGN_KEY "$IMAGE:latest" || echo "::warning::cosign failed"
|
||||||
docker push "$IMAGE:${GITHUB_SHA}"
|
docker push "$IMAGE:${GITHUB_SHA}"
|
||||||
- name: Trigger orca redeploy
|
- name: Trigger orca redeploy
|
||||||
run: |
|
run: |
|
||||||
|
|||||||
Reference in New Issue
Block a user