sign only master

leonkappes · Aug 29, 2022 · 6436ba2 · 6436ba2
1 parent 80d685d
commit 6436ba2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
@@ -84,4 +84,4 @@ jobs:
           COSIGN_EXPERIMENTAL: "true"
         # This step uses the identity token to provision an ephemeral certificate
         # against the sigstore community Fulcio instance.
-        run: cosign sign ${{ steps.meta.outputs.tags }}
+        run: cosign sign ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:master@${{ steps.build-and-push.outputs.digest }}