fix: use github.sha as tag rather than digest during signing (#19)

fix: use github.sha as tag rather than digest
ublue-os · Sep 6, 2024 · 1f5867e · 1f5867e
1 parent 0dc84ec
commit 1f5867e
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/.github/workflows/build-40.yaml b/.github/workflows/build-40.yaml
@@ -86,8 +86,7 @@ jobs:
       - name: Sign container image
         if: github.event_name != 'pull_request'
         run: |
-          cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ env.IMAGE_NAME }}@${{ github.sha }}
+          cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ env.IMAGE_NAME }}:${{ github.sha }}
         env:
-          TAGS: ${{ steps.build_image.outputs.digest }}
           COSIGN_EXPERIMENTAL: false
           COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}