diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1914fcb5d..ca36272f5 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -70,6 +70,23 @@ jobs: token: ${{ secrets.GITHUB_TOKEN }} charts_url: https://flagger.app linting: off + - name: Publish signed Helm chart to GHCR + env: + COSIGN_EXPERIMENTAL: 1 + run: | + helm package charts/flagger + helm push flagger-${{ steps.prep.outputs.VERSION }}.tgz oci://ghcr.io/fluxcd/charts + cosign sign ghcr.io/fluxcd/charts/flagger:${{ steps.prep.outputs.VERSION }} + rm flagger-${{ steps.prep.outputs.VERSION }}.tgz + - name: Publish signed manifests to GHCR + env: + COSIGN_EXPERIMENTAL: 1 + run: | + flux push artifact oci://ghcr.io/fluxcd/flagger-manifests:${{ steps.prep.outputs.VERSION }} \ + --path="./kustomize" \ + --source="$(git config --get remote.origin.url)" \ + --revision="${{ steps.prep.outputs.VERSION }}/$(git rev-parse HEAD)" + cosign sign ghcr.io/fluxcd/flagger-manifests:${{ steps.prep.outputs.VERSION }} - uses: anchore/sbom-action/download-syft@v0 - name: Create release and SBOM uses: goreleaser/goreleaser-action@v2