From be8ed8a696001fac6c1b41db721181a0985952c4 Mon Sep 17 00:00:00 2001 From: Stefan Prodan Date: Wed, 25 Aug 2021 12:15:29 +0300 Subject: [PATCH] Fix cosign workflow Signed-off-by: Stefan Prodan --- {cosign => .cosign}/README.md | 0 {cosign => .cosign}/cosign.key | 0 {cosign => .cosign}/cosign.pub | 0 .github/workflows/release.yml | 4 ++-- CHANGELOG.md | 2 +- 5 files changed, 3 insertions(+), 3 deletions(-) rename {cosign => .cosign}/README.md (100%) rename {cosign => .cosign}/cosign.key (100%) rename {cosign => .cosign}/cosign.pub (100%) diff --git a/cosign/README.md b/.cosign/README.md similarity index 100% rename from cosign/README.md rename to .cosign/README.md diff --git a/cosign/cosign.key b/.cosign/cosign.key similarity index 100% rename from cosign/cosign.key rename to .cosign/cosign.key diff --git a/cosign/cosign.pub b/.cosign/cosign.pub similarity index 100% rename from cosign/cosign.pub rename to .cosign/cosign.pub diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c5dc1f8f..ef478d66 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -56,14 +56,14 @@ jobs: - name: Sign image run: | echo -n "${{secrets.COSIGN_PASSWORD}}" | \ - cosign sign -key ./cosign/cosign.key -a git_sha=$GITHUB_SHA \ + cosign sign -key ./.cosign/cosign.key -a git_sha=$GITHUB_SHA \ ghcr.io/fluxcd/flagger:${{ steps.prep.outputs.VERSION }} - name: Check images run: | docker buildx imagetools inspect ghcr.io/fluxcd/flagger:${{ steps.prep.outputs.VERSION }} - name: Verifiy image signature run: | - cosign verify -key ./cosign/cosign.pub \ + cosign verify -key ./.cosign/cosign.pub \ ghcr.io/fluxcd/flagger:${{ steps.prep.outputs.VERSION }} - name: Publish Helm charts uses: stefanprodan/helm-gh-pages@v1.3.0 diff --git a/CHANGELOG.md b/CHANGELOG.md index 823f99b4..de988679 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -11,7 +11,7 @@ For more details see the [OSM Progressive Delivery tutorial](https://docs.flagge Starting with this version, Flagger container images are signed with [sigstore/cosign](https://github.com/sigstore/cosign), for more details see the -[Flagger cosign docs](https://github.com/fluxcd/flagger/blob/main/cosign/README.md). +[Flagger cosign docs](https://github.com/fluxcd/flagger/blob/main/.cosign/README.md). #### Features