Cosign on digest

nex-health · Jan 29, 2024 · 913b799 · 913b799
1 parent 638ff6f
commit 913b799
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ permissions:
   packages: write # needed for ghcr access
 
 env:
-  CONTAINER_IMAGE: ghcr.io/nex-health/passenger-exporter
+  GHCR_CONTAINER_IMAGE: ghcr.io/nex-health/passenger-exporter
 
 jobs:
   release:
@@ -58,7 +58,7 @@ jobs:
         uses: docker/metadata-action@v5
         with:
           images: |
-            ${{ env.CONTAINER_IMAGE }}
+            ${{ env.GHCR_CONTAINER_IMAGE }}
           tags: |
             type=raw,value=${{ steps.prep.outputs.VERSION }}
             type=raw,value=latest
@@ -83,4 +83,4 @@ jobs:
         env:
           COSIGN_EXPERIMENTAL: 1
         run: |
-          cosign sign --yes ${{ env.CONTAINER_IMAGE }}:${{ steps.prep.outputs.VERSION }}
+          cosign sign --yes ${{ env.GHCR_CONTAINER_IMAGE }}@${{ steps.build.outputs.digest }}