fix: image signing

Signed-off-by: Bence Csati <csatib02@gmail.com>
csatib02 · Sep 2, 2024 · f62b710 · f62b710
1 parent e7d4e8d
commit f62b710
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/artifacts.yaml b/.github/workflows/artifacts.yaml
@@ -9,6 +9,10 @@ on:
         default: false
         type: boolean
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   container-image:
     name: Container-Image
@@ -86,7 +90,7 @@ jobs:
           for tag in ${TAGS}; do
             images+="${tag}@${DIGEST} "
           done
-          cosign sign --yes --key ${COSIGN_KEY} ${images}
+          cosign sign --yes --key env://COSIGN_PRIVATE_KEY ${images}
       
       - name: Upload image artifact
         uses: actions/upload-artifact@v4