File tree Expand file tree Collapse file tree 4 files changed +13
-5
lines changed
Expand file tree Collapse file tree 4 files changed +13
-5
lines changed Original file line number Diff line number Diff line change @@ -523,16 +523,16 @@ endif
523523.PHONY : sign
524524sign : # # Sign an AKO multi-architecture image
525525 @echo " Signing multi-architecture image $( IMG) ..."
526- IMG=$(IMG ) SIGNATURE_REPO=$(SIGNATURE_REPO ) ./scripts/sign-multiarch.sh
526+ @ IMG=$(IMG ) SIGNATURE_REPO=$(SIGNATURE_REPO ) ./scripts/sign-multiarch.sh
527527
528528./ako.pem :
529529 curl $(AKO_SIGN_PUBKEY ) > $@
530530
531531.PHONY : verify
532532verify : ./ako.pem # # Verify an AKO multi-architecture image's signature
533533 @echo " Verifying multi-architecture image signature $( IMG) ..."
534- IMG=$(IMG ) SIGNATURE_REPO=$(SIGNATURE_REPO ) \
535- ./scripts/sign-multiarch.sh verify && echo " VERIFIED OK "
534+ @ IMG=$(IMG ) SIGNATURE_REPO=$(SIGNATURE_REPO ) \
535+ ./scripts/sign-multiarch.sh verify
536536
537537.PHONY : helm-upd-crds
538538helm-upd-crds :
Original file line number Diff line number Diff line change @@ -34,3 +34,9 @@ for platform_sha in ${IMG_PLATFORMS_SHAS}; do
3434 echo " ${action} platform image ${img} @${platform_sha} ..."
3535 IMG=" ${img} @${platform_sha} " " ${SCRIPT_DIR} /${action} .sh"
3636done
37+
38+ msg=" All signed"
39+ if [ " ${action} " == " verify" ]; then
40+ msg=" All verified OK"
41+ fi
42+ echo " ✅ ${msg} "
Original file line number Diff line number Diff line change @@ -45,4 +45,6 @@ docker run \
4545 -v " $( pwd) :$( pwd) " \
4646 -w " $( pwd) " \
4747 artifactory.corp.mongodb.com/release-tools-container-registry-local/garasign-cosign \
48- cosign sign --key " ${PKCS11_URI} " --tlog-upload=false " ${img} "
48+ cosign sign --key " ${PKCS11_URI} " \
49+ --tlog-upload=false --use-signing-config=false --new-bundle-format=false " ${img} " && \
50+ echo " ✍️ Signed"
Original file line number Diff line number Diff line change @@ -25,4 +25,4 @@ SCRIPT_DIR=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
2525KEY_FILE=${KEY_FILE:- ako.pem}
2626
2727COSIGN_REPOSITORY=" ${SIGNATURE_REPO} " " ${SCRIPT_DIR} " /retry.sh cosign verify \
28- --insecure-ignore-tlog --key=" ${KEY_FILE} " " ${img_to_verify} "
28+ --insecure-ignore-tlog --key=" ${KEY_FILE} " " ${img_to_verify} " && echo " ✅ Signature OK "
You can’t perform that action at this time.
0 commit comments