From 6ba35d8d8c2c9cd8e7045279d0b2edd39a0de360 Mon Sep 17 00:00:00 2001 From: Luca Guerra Date: Fri, 30 Jun 2023 08:59:51 +0000 Subject: [PATCH] login to ghcr before signing Signed-off-by: Luca Guerra --- .github/workflows/upload-oci-artifacts.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.github/workflows/upload-oci-artifacts.yaml b/.github/workflows/upload-oci-artifacts.yaml index 96c78833..0f4000bb 100644 --- a/.github/workflows/upload-oci-artifacts.yaml +++ b/.github/workflows/upload-oci-artifacts.yaml @@ -61,6 +61,14 @@ jobs: with: cosign-release: 'v2.1.0' - run: cosign version + + - name: Log into ghcr.io + uses: docker/login-action@master + with: + registry: ghcr.io + username: ${{ github.repository_owner }} + password: ${{ secrets.GITHUB_TOKEN }} + - name: Sign the artifacts with GitHub OIDC Token run: cosign sign --yes ${{ matrix.value.repository.ref }}@${{ matrix.value.artifact.digest }}