Skip to content

Add cosign yes answer to prompts #363

Add cosign yes answer to prompts

Add cosign yes answer to prompts #363

Workflow file for this run

name: build
on:
push:
branches:
- '*'
tags:
- '*'
pull_request:
jobs:
build:
permissions:
id-token: write
contents: read
env:
IMAGE: quay.io/evryfs/base-java
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
- uses: brpaz/[email protected]
- name: Docker meta
id: meta
uses: docker/metadata-action@v4
with:
# list of Docker images to use as base name for tags
images: |
${{ env.IMAGE }}
# generate Docker tags based on the following events/attributes
tags: |
type=ref,event=tag
type=ref,event=branch
type=ref,event=pr
type=sha
- name: Login to quay.io
if: github.event_name != 'pull_request'
uses: docker/login-action@v2
with:
registry: quay.io
username: ${{ secrets.QUAY_USERNAME }}
password: ${{ secrets.QUAY_PASSWORD }}
- name: Build and push
id: build-push
uses: docker/build-push-action@v4
with:
context: .
push: ${{ github.event_name != 'pull_request' }}
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
- uses: sigstore/[email protected]
- name: cosign
if: ${{ github.event_name != 'pull_request' }}
env:
COSIGN_EXPERIMENTAL: 1
#run: cosign sign --oidc-issuer ${env.ACTIONS_ID_TOKEN_REQUEST_URL} ${{ env.IMAGE }}
run: cosign sign -y --oidc-issuer https://token.actions.githubusercontent.com ${{ env.IMAGE }}@${{ steps.build-push.outputs.digest }}