File tree Expand file tree Collapse file tree 1 file changed +4
-10
lines changed Expand file tree Collapse file tree 1 file changed +4
-10
lines changed Original file line number Diff line number Diff line change 3434 # Obtain the digest from this tag
3535 DIGEST=$(curl "https://hub.docker.com/v2/repositories/snyk/snyk-universal-broker/tags/${LATEST_TAG}" | jq '.digest' -r)
3636 # Sign the image, using GitHub as an OIDC provider
37- cosign sign --yes snyk/snyk-universal-broker-helm @${DIGEST}
38- cosign sign --yes snyk/snyk-universal-broker-helm :${LATEST_TAG}
37+ cosign sign --yes snyk/snyk-universal-broker@${DIGEST}
38+ cosign sign --yes snyk/snyk-universal-broker:${LATEST_TAG}
3939 - name : Verify signature
4040 run : |
41- cosign verify \
42- snyk/snyk-universal-broker-helm@${DIGEST} \
43- --certificate-identity-regexp="https://github.com/snyk/snyk-universal-broker-helm/.*" \
44- --certificate-oidc-issuer="https://token.actions.githubusercontent.com"
45- cosign verify \
46- snyk/snyk-universal-broker-helm:${LATEST_TAG} \
47- --certificate-identity-regexp="https://github.com/snyk/snyk-universal-broker-helm/.*" \
48- --certificate-oidc-issuer="https://token.actions.githubusercontent.com"
41+ cosign verify snyk/snyk-universal-broker@${DIGEST} --certificate-identity-regexp="https://github.com/snyk/snyk-universal-broker-helm/.*" --certificate-oidc-issuer="https://token.actions.githubusercontent.com"
42+ cosign verify snyk/snyk-universal-broker:${LATEST_TAG} --certificate-identity-regexp="https://github.com/snyk/snyk-universal-broker-helm/.*" --certificate-oidc-issuer="https://token.actions.githubusercontent.com"
You can’t perform that action at this time.
0 commit comments