We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 4d24d63 commit ee2f4a2Copy full SHA for ee2f4a2
.github/workflows/build-and-sign-image.yml
@@ -65,7 +65,7 @@ jobs:
65
COSIGN_EXPERIMENTAL: "true"
66
# This step uses the identity token to provision an ephemeral certificate
67
# against the sigstore community Fulcio instance.
68
- run: cosign sign "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.docker-build-and-push.outputs.digest }}"
+ run: cosign sign --yes "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.docker-build-and-push.outputs.digest }}"
69
70
# NOTE: This runs statically against the latest tag in Docker Hub which was not produced by this workflow
71
# This should be updated once this workflow is fully implemented
0 commit comments