From 4a0c6b9b74de9a4ac8a812f5e1f4aa9144755823 Mon Sep 17 00:00:00 2001 From: "Adam D. Cornett" Date: Fri, 19 Apr 2024 09:26:51 -0700 Subject: [PATCH] changing cosign certificate identity url to use github.repository so the action can work properly in forks Signed-off-by: Adam D. Cornett --- .github/workflows/build-multiarch.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build-multiarch.yml b/.github/workflows/build-multiarch.yml index 2cd11219..58dd5ccb 100644 --- a/.github/workflows/build-multiarch.yml +++ b/.github/workflows/build-multiarch.yml @@ -86,6 +86,6 @@ jobs: if: ${{ inputs.sign == true && github.event.release && github.event.action == 'published' }} run: | cosign verify \ - --certificate-identity https://github.com/redhat-openshift-ecosystem/openshift-preflight/.github/workflows/build-multiarch.yml@refs/tags/${{ inputs.tag }} \ + --certificate-identity https://github.com/${{ github.repository }}/.github/workflows/build-multiarch.yml@refs/tags/${{ inputs.tag }} \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ ${{ secrets.registry }}/${{ inputs.name }}:${{ inputs.tag }}