Merge pull request #81 from adambkaplan/fix-release-signing

Fix signing of released image
shipwright-io · Jun 3, 2022 · 48c8b37 · 48c8b37
2 parents e5b2847 + 300b8a0
commit 48c8b37
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -29,7 +29,7 @@ jobs:
     - uses: actions/setup-go@v2
       with:
         go-version: 1.18.x
-    - uses: sigstore/cosign-installer@v1.2.0
+    - uses: sigstore/cosign-installer@v2.3.0
     - name: Build Release Images
       env:
         REGISTRY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
@@ -44,7 +44,7 @@ jobs:
         # OIDC.
         COSIGN_EXPERIMENTAL: "true"
       run: |
-        grep -o "ghcr.io[^\"]*" "${GITHUB_WORKSPACE}/bundle/manifests/shipwright-operator.clusterserviceversion.yaml" | xargs cosign sign \
+        grep -o "ghcr.io[^\"]*" "${GITHUB_WORKSPACE}/_output/olm/bundle/manifests/shipwright-operator.clusterserviceversion.yaml" | uniq | xargs -n 1 cosign sign \
             -a sha=${{ github.sha }} \
             -a run_id=${{ github.run_id }} \
             -a run_attempt=${{ github.run_attempt }}