From 76dbf86941ccbb31d79e94d347ace94315ee056a Mon Sep 17 00:00:00 2001 From: Itay Grudev Date: Sat, 23 Mar 2024 15:35:58 +0200 Subject: [PATCH] Bug Fix: Release process tried to sign prov files in addition to the chart file Additionally - using variables to pull the repository name instead of hard-coding it. Signed-off-by: Itay Grudev --- .github/workflows/release-publish.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml index 5903c9615..571919300 100644 --- a/.github/workflows/release-publish.yml +++ b/.github/workflows/release-publish.yml @@ -71,14 +71,14 @@ jobs: # would be preserved, causing a non-zero exit. Set nullglob to fix this run: | shopt -s nullglob - for pkg in .cr-release-packages/*; do + for pkg in .cr-release-packages/*.tgz; do if [ -z "${pkg:-}" ]; then break fi - helm push "${pkg}" oci://ghcr.io/"${GITHUB_REPOSITORY_OWNER}"/charts + helm push "${pkg}" oci://ghcr.io/"${GITHUB_REPOSITORY}" file=${pkg##*/} name=${file%-*} version=${file%.*} version=${version##*-} - cosign sign --yes ghcr.io/"${GITHUB_REPOSITORY_OWNER}"/charts/"${name}":"${version}" + cosign sign --yes ghcr.io/"${GITHUB_REPOSITORY}"/"${name}":"${version}" done