From d9e1e3722717e145d7a134ee998cde675adf4b6d Mon Sep 17 00:00:00 2001 From: vishreddy01 Date: Thu, 11 Apr 2024 15:46:33 -0700 Subject: [PATCH] removed sigining the image --- .github/workflows/docker-publish-pg2pg.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/docker-publish-pg2pg.yml b/.github/workflows/docker-publish-pg2pg.yml index 3438731..133f80f 100644 --- a/.github/workflows/docker-publish-pg2pg.yml +++ b/.github/workflows/docker-publish-pg2pg.yml @@ -60,11 +60,11 @@ jobs: cache-from: type=gha cache-to: type=gha,mode=max - - name: Sign the published Docker image - if: ${{ github.event_name != 'pull_request' }} - env: + #- name: Sign the published Docker image + #if: ${{ github.event_name != 'pull_request' }} + #env: # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable - TAGS: ${{ steps.meta.outputs.tags }} - DIGEST: ${{ steps.build-and-push.outputs.digest }} + #TAGS: ${{ steps.meta.outputs.tags }} + #DIGEST: ${{ steps.build-and-push.outputs.digest }} #run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}