We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent da609b2 commit fdef46dCopy full SHA for fdef46d
.github/workflows/docker-build-push.yml
@@ -8,7 +8,9 @@ on:
8
- cron: "0 0 * * 0"
9
workflow_dispatch:
10
11
-permissions: {}
+permissions:
12
+ # Required by sigstore
13
+ id-token: write
14
15
jobs:
16
build:
@@ -63,4 +65,4 @@ jobs:
63
65
images+="'${tag}@${DIGEST}' "
64
66
done
67
# shellcheck disable=SC2086
- cosign sign --recursive --oidc-issuer 'https://token.actions.githubusercontent.com' --yes ${images}
68
+ cosign sign --recursive --yes ${images}
0 commit comments