Update docker-publish.yml

.github/workflows/docker-publish.yml

@@ -54,16 +54,16 @@ jobs:
         id: build-and-push
         run: |
           docker-compose build
-          DOCKER_OUTPUT=$(docker-compose push)
-          echo "${DOCKER_OUTPUT}" 
-          DIGEST=$(echo "${DOCKER_OUTPUT}" | grep -oP '(?<=digest: ).*')
-          echo "DIGEST=${DIGEST}" >> $GITHUB_ENV
+          DOCKER_IMAGE=$(docker-compose images --format "{{.Repository}}:{{.Tag}}")
+          docker-compose push
         env:
           DOCKER_BUILDKIT: 1
 
       - name: Sign the published Docker image
         if: ${{ github.event_name != 'pull_request' }}
         env:
           TAGS: ${{ steps.meta.outputs.tags }}
-          DIGEST: ${{ env.DIGEST }}
-        run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
+        run: |
+          for tag in ${TAGS}; do
+            cosign sign --key /path/to/your/private-key.key --skopeo-repo docker://${DOCKER_IMAGE}:${tag} --upload-signature
+          done