Add use-sigstore-attachments: true to the image:publish:secure job

Fixes: 8317be4 ("Sign the images with sigstore's fulcio/rekor")
This commit is contained in:
Kristian Klausen 2023-09-21 06:08:26 +02:00
parent 797702633e
commit c432cbcbe2
No known key found for this signature in database
GPG Key ID: E2BE346E410366C3

View File

@ -159,6 +159,7 @@ image:publish:secure:
- podman login -u "$DOCKERHUB_USERNAME" -p "$DOCKERHUB_ACCESS_TOKEN" "docker.io"
- podman login -u "$QUAY_USERNAME" -p "$QUAY_PASSWORD" "quay.io"
- podman login -u "$GHCR_USERNAME" -p "$GHCR_PASSWORD" "ghcr.io"
- 'echo -e "default-docker:\n use-sigstore-attachments: true" > /etc/containers/registries.d/sigstore.yaml'
script:
- podman build
-f "$CI_PROJECT_DIR/Dockerfile.$GROUP"