fix: modify CI permissions, fix attest

Signed-off-by: K.B.Dharun Krishna <[email protected]>
kbdharun · May 11, 2024 · 1820912 · 1820912
1 parent d87fc4d
commit 1820912
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml
@@ -83,6 +83,7 @@ jobs:
 
     - uses: sigstore/[email protected]
     - name: Sign container image
+      if: github.repository == 'kbdharun/dev-image' && github.event_name != 'pull_request'
       run: |
         cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ steps.docker_meta.outputs.tags }}
       env:
@@ -92,7 +93,8 @@ jobs:
     - name: Attest pushed image
       uses: actions/attest-build-provenance@v1
       id: attest
+      if: github.repository == 'kbdharun/dev-image' && github.event_name != 'pull_request'
       with:
         subject-name: ghcr.io/${{ github.actor }}/${{ env.IMAGE_NAME }}
         subject-digest: ${{ steps.push-ghcr.outputs.digest }}
-        push-to-registry: true
+        push-to-registry: false