diff --git a/cosign/README.md b/.cosign/README.md similarity index 100% rename from cosign/README.md rename to .cosign/README.md diff --git a/cosign/cosign.key b/.cosign/cosign.key similarity index 100% rename from cosign/cosign.key rename to .cosign/cosign.key diff --git a/cosign/cosign.pub b/.cosign/cosign.pub similarity index 100% rename from cosign/cosign.pub rename to .cosign/cosign.pub diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c5dc1f8f..ef478d66 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -56,14 +56,14 @@ jobs: - name: Sign image run: | echo -n "${{secrets.COSIGN_PASSWORD}}" | \ - cosign sign -key ./cosign/cosign.key -a git_sha=$GITHUB_SHA \ + cosign sign -key ./.cosign/cosign.key -a git_sha=$GITHUB_SHA \ ghcr.io/fluxcd/flagger:${{ steps.prep.outputs.VERSION }} - name: Check images run: | docker buildx imagetools inspect ghcr.io/fluxcd/flagger:${{ steps.prep.outputs.VERSION }} - name: Verifiy image signature run: | - cosign verify -key ./cosign/cosign.pub \ + cosign verify -key ./.cosign/cosign.pub \ ghcr.io/fluxcd/flagger:${{ steps.prep.outputs.VERSION }} - name: Publish Helm charts uses: stefanprodan/helm-gh-pages@v1.3.0 diff --git a/CHANGELOG.md b/CHANGELOG.md index 823f99b4..de988679 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -11,7 +11,7 @@ For more details see the [OSM Progressive Delivery tutorial](https://docs.flagge Starting with this version, Flagger container images are signed with [sigstore/cosign](https://github.com/sigstore/cosign), for more details see the -[Flagger cosign docs](https://github.com/fluxcd/flagger/blob/main/cosign/README.md). +[Flagger cosign docs](https://github.com/fluxcd/flagger/blob/main/.cosign/README.md). #### Features