Skip to content

Commit

Permalink
Disable cosign verification by default (#199)
Browse files Browse the repository at this point in the history
Since we can't sign the current builder, we also need to disable
verification of it's signature. This avoids another chicken-egg-problem.
  • Loading branch information
agners authored Mar 20, 2024
1 parent ccbad93 commit eec2fe4
Showing 1 changed file with 0 additions and 4 deletions.
4 changes: 0 additions & 4 deletions action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -25,10 +25,6 @@ runs:
- shell: bash
run: |
docker pull ghcr.io/home-assistant/amd64-builder:${{ steps.version.outputs.version }}
cosign verify \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp https://github.com/home-assistant/builder/.* \
ghcr.io/home-assistant/amd64-builder:${{ steps.version.outputs.version }}
- shell: bash
id: builder
Expand Down

0 comments on commit eec2fe4

Please sign in to comment.