fix(cosign): disable cosign temporarily

digitalservicebund · Jan 24, 2024 · e5ede03 · e5ede03
1 parent 5c3bd87
commit e5ede03
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/.github/workflows/ci-pipeline.yml b/.github/workflows/ci-pipeline.yml
@@ -96,7 +96,7 @@ jobs:
         with:
           name: "${{ env.VULNERABILITY_SCAN_RECORD }}"
       - run: ./docker.sh --push prod
-      - run: ./docker.sh --attest
+      # - run: ./docker.sh --attest
       - id: prod_image_tag
         run: echo "prod_image_tag=$(./docker.sh --prodImageTag)" >> $GITHUB_OUTPUT
     outputs:

diff --git a/docker.sh b/docker.sh
@@ -135,19 +135,19 @@ case $1 in
         echo "Pushing $APP_IMAGE..."
         docker push --all-tags $APP_IMAGE
         echo "Signing $APP_IMAGE with cosign"
-        cosign sign --yes $APP_IMAGE
+        # cosign sign --yes $APP_IMAGE
         ;;
     content)
         echo "Pushing $CONTENT_IMAGE..."
         docker push --all-tags $CONTENT_IMAGE
         echo "Signing $CONTENT_IMAGE with cosign"
-        cosign sign --yes $CONTENT_IMAGE
+        # cosign sign --yes $CONTENT_IMAGE
         ;;
     prod)
         echo "Pushing $PROD_IMAGE..."
         docker push --all-tags $PROD_IMAGE
         echo "Signing $PROD_IMAGE with cosign"
-        cosign sign --yes $PROD_IMAGE
+        # cosign sign --yes $PROD_IMAGE
         ;;
     esac
     ;;