Merge pull request #1140 from kranurag7/cosign

sign images with cosign 2.0
kubearmor · Mar 7, 2023 · 79b8769 · 79b8769
2 parents 73ce4fa + 3fd348f
commit 79b8769
Showing 1 changed file with 5 additions and 9 deletions.
diff --git a/.github/workflows/ci-latest-release.yml b/.github/workflows/ci-latest-release.yml
@@ -96,11 +96,9 @@ jobs:
           echo "initdigest=$(jq -r '.["containerimage.digest"]' kubearmor-init.json)" >> $GITHUB_OUTPUT
 
       - name: Sign the Container Images
-        env:
-          COSIGN_EXPERIMENTAL: "true"
         run: |
-          cosign sign -r kubearmor/kubearmor@${{ steps.digest.outputs.imagedigest }}
-          cosign sign -r kubearmor/kubearmor-init@${{ steps.digest.outputs.initdigest }}
+          cosign sign -r kubearmor/kubearmor@${{ steps.digest.outputs.imagedigest }} --yes
+          cosign sign -r kubearmor/kubearmor-init@${{ steps.digest.outputs.initdigest }} --yes
 
   push-stable-version:
     name: Create KubeArmor stable release
@@ -149,7 +147,7 @@ jobs:
       - name: Install Cosign 
         uses: sigstore/cosign-installer@main
         with:
-          cosign-release: 'v2.0.0-rc.0'
+          cosign-release: 'v2.0.0'
 
       - name: Get Image Digest
         id: digest
@@ -161,8 +159,6 @@ jobs:
           echo $initdigest 
 
       - name: Sign the Container Images
-        env:
-          COSIGN_EXPERIMENTAL: "true"
         run: |
-          cosign sign -r kubearmor/kubearmor@${{ steps.digest.outputs.imagedigest }}
-          cosign sign -r kubearmor/kubearmor-init@${{ steps.digest.outputs.initdigest }}
+          cosign sign -r kubearmor/kubearmor@${{ steps.digest.outputs.imagedigest }} --yes
+          cosign sign -r kubearmor/kubearmor-init@${{ steps.digest.outputs.initdigest }} --yes