Skip to content

Commit

Permalink
add docker signatures with cosign and image template to dockers field
Browse files Browse the repository at this point in the history
  • Loading branch information
anderssonw committed Sep 21, 2023
1 parent 7f351a4 commit 31243a4
Showing 1 changed file with 20 additions and 5 deletions.
25 changes: 20 additions & 5 deletions .goreleaser.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -33,17 +33,32 @@ archives:

dockers:
- image_templates:
- "ghcr.io/kartverket/skiperator"
- "ghcr.io/kartverket/skiperator:latest"
- "ghcr.io/kartverket/skiperator:{{ .Version }}"
extra_files:
- ./
docker_manifests:
- name_template: "ghcr.io/kartverket/skiperator:{{ .Version }}"
dockerfile: Dockerfile

docker_signs:
- artifacts: all
cmd: cosign
args:
- "sign"
- "--oidc-issuer=https://token.actions.githubusercontent.com"
- "${artifact}"
- "--yes"

signs:
- cmd: cosign
- artifacts: all
cmd: cosign
signature: "${artifact}.sig"
args: ["sign-blob", "--oidc-issuer=https://token.actions.githubusercontent.com", "--output-signature=${signature}", "-y", "${artifact}"]
artifacts: all
args:
- "sign-blob"
- "--oidc-issuer=https://token.actions.githubusercontent.com"
- "--output-signature=${signature}"
- "${artifact}"
- "--yes"

sboms:
- artifacts: archive
Expand Down

0 comments on commit 31243a4

Please sign in to comment.