@@ -13,6 +13,9 @@ concurrency:
1313 group : release-${{ github.ref }}
1414 cancel-in-progress : true
1515
16+ env :
17+ DOCKER_HUB : seerr/seerr
18+
1619jobs :
1720 changelog :
1821 name : Generate changelog
@@ -177,8 +180,8 @@ jobs:
177180 if : ${{ !contains(env.VERSION, '-') }}
178181 run : |
179182 docker buildx imagetools create \
180- -t ${{ github.repository }}:latest \
181- ${{ github.repository }}:${{ env.VERSION }}
183+ -t ${{ env.DOCKER_HUB }}:latest \
184+ ${{ env.DOCKER_HUB }}:${{ env.VERSION }}
182185
183186 docker buildx imagetools create \
184187 -t ghcr.io/${{ github.repository }}:latest \
@@ -223,15 +226,15 @@ jobs:
223226 - name : Sign images
224227 run : |
225228 cosign sign --recursive "ghcr.io/${{ github.repository }}@${{ needs.publish.outputs.image_digest }}"
226- cosign sign --recursive "${{ github.repository }}@${{ needs.publish.outputs.image_digest }}"
229+ cosign sign --recursive "${{ env.DOCKER_HUB }}@${{ needs.publish.outputs.image_digest }}"
227230
228231 - name : Generate SBOMs
229232 run : |
230233 trivy image --format cyclonedx --output seerr-ghcr-image-${{ env.VERSION }}.sbom \
231234 "ghcr.io/${{ github.repository }}@${{ needs.publish.outputs.image_digest }}"
232235
233236 trivy image --format cyclonedx --output seerr-dockerhub-image-${{ env.VERSION }}.sbom \
234- "${{ github.repository }}@${{ needs.publish.outputs.image_digest }}"
237+ "${{ env.DOCKER_HUB }}@${{ needs.publish.outputs.image_digest }}"
235238
236239 - name : Attest SBOMs
237240 run : |
@@ -243,7 +246,7 @@ jobs:
243246 cosign attest \
244247 --type cyclonedx \
245248 --predicate seerr-dockerhub-image-${{ env.VERSION }}.sbom \
246- "${{ github.repository }}@${{ needs.publish.outputs.image_digest }}"
249+ "${{ env.DOCKER_HUB }}@${{ needs.publish.outputs.image_digest }}"
247250
248251 - name : Upload SBOMs
249252 uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
@@ -271,7 +274,7 @@ jobs:
271274 --certificate-identity "https://github.com/${{ github.workflow_ref }}" \
272275 --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
273276
274- cosign verify "${{ github.repository }}@${{ needs.publish.outputs.image_digest }}" \
277+ cosign verify "${{ env.DOCKER_HUB }}@${{ needs.publish.outputs.image_digest }}" \
275278 --certificate-identity "https://github.com/${{ github.workflow_ref }}" \
276279 --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
277280
@@ -282,7 +285,7 @@ jobs:
282285 --certificate-identity "https://github.com/${{ github.workflow_ref }}" \
283286 --certificate-oidc-issuer "https://token.actions.githubusercontent.com" > /dev/null
284287
285- cosign verify-attestation "${{ github.repository }}@${{ needs.publish.outputs.image_digest }}" \
288+ cosign verify-attestation "${{ env.DOCKER_HUB }}@${{ needs.publish.outputs.image_digest }}" \
286289 --type cyclonedx \
287290 --certificate-identity "https://github.com/${{ github.workflow_ref }}" \
288291 --certificate-oidc-issuer "https://token.actions.githubusercontent.com" > /dev/null
0 commit comments