From 21d45870d6c38a7a6c0bdc6e8f0d66c14db84578 Mon Sep 17 00:00:00 2001 From: Ghostopheles Date: Wed, 1 Nov 2023 20:44:15 -0500 Subject: [PATCH] Let it end --- .github/workflows/docker-publish.yml | 21 --------------------- 1 file changed, 21 deletions(-) diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index 46c89a1..35c9d51 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -45,13 +45,6 @@ jobs: - name: Checkout repository uses: actions/checkout@v3 - # Install the cosign tool except on PR - # https://github.com/sigstore/cosign-installer - - name: Install cosign - uses: sigstore/cosign-installer@v3.1.2 - with: - cosign-release: 'v3.1.2' - - name: Set up QEMU uses: docker/setup-qemu-action@v2 @@ -88,17 +81,3 @@ jobs: labels: ${{ steps.meta.outputs.labels }} platforms: linux/amd64,linux/arm64,linux/arm/v7 secrets: DEBUG=False - - - # Sign the resulting Docker image digest except on PRs. - # This will only write to the public Rekor transparency log when the Docker - # repository is public to avoid leaking data. If you would like to publish - # transparency data even for private images, pass --force to cosign below. - # https://github.com/sigstore/cosign - - name: Sign the published Docker image - if: ${{ github.event_name != 'pull_request' }} - env: - COSIGN_EXPERIMENTAL: "true" - # This step uses the identity token to provision an ephemeral certificate - # against the sigstore community Fulcio instance. - run: echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign sign {}@${{ steps.build-and-push.outputs.digest }}