fix(release): don't try to sign images that haven't been pushed (#26)

ibm-skills-network · Sep 21, 2023 · 2dcd4fc · 2dcd4fc
1 parent ffd863a
commit 2dcd4fc
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -218,11 +218,14 @@ jobs:
             SN_GITHUB_NPM_REGISTRY=https://npm.pkg.github.com
 
       - uses: sigstore/cosign-installer@main
+        if: ${{ inputs.push }}
 
       - name: Write signing key to disk
+        if: ${{ inputs.push }}
         run: echo "${{ secrets.CONTAINER_IMAGE_SIGNING_PRIVATE_KEY }}" > cosign.key
 
       - name: Sign container image
+        if: ${{ inputs.push }}
         run: |
           cosign sign --key cosign.key \
             -a "repo=${{ github.repository }}" \