diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 72f2b41..1fab15c 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -39,6 +39,7 @@ jobs: password: ${{ secrets.GITHUB_TOKEN }} - name: Install cosign + if: github.event_name != 'workflow_dispatch' uses: sigstore/cosign-installer@v3.7.0 - name: Cache cargo bin @@ -65,6 +66,7 @@ jobs: run: cargo component build --release - name: Publish to GitHub Container Registry + if: github.event_name != 'workflow_dispatch' id: publish uses: bytecodealliance/wkg-github-action@v5 with: @@ -73,4 +75,5 @@ jobs: version: ${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.version'] }} - name: Sign the wasm component + if: github.event_name != 'workflow_dispatch' run: cosign sign --yes ghcr.io/${{ env.IMAGE_NAME }}/${{ env.COMPONENT_NAME }}@${{ steps.publish.outputs.digest }}