We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 3a49398 commit 8fb5782Copy full SHA for 8fb5782
.github/workflows/docker-image-release.yml
@@ -81,16 +81,14 @@ jobs:
81
env:
82
COSIGN_EXPERIMENTAL: "1"
83
run: |
84
- cosign sign --yes --key github docker.io/fontebasso/php-nginx:${RELEASE_VERSION}
85
- cosign sign --yes --key github docker.io/fontebasso/php-nginx:latest
+ cosign sign --yes docker.io/fontebasso/php-nginx:${RELEASE_VERSION}
+ cosign sign --yes docker.io/fontebasso/php-nginx:latest
86
87
- name: Generate and attach SLSA Provenance
88
89
cosign attest --yes \
90
- --key github \
91
--type=provenance \
92
docker.io/fontebasso/php-nginx:${RELEASE_VERSION}
93
94
95
96
docker.io/fontebasso/php-nginx:latest
0 commit comments