diff --git a/.github/workflows/release-notation.yaml b/.github/workflows/release-notation.yaml index b238805..850193c 100644 --- a/.github/workflows/release-notation.yaml +++ b/.github/workflows/release-notation.yaml @@ -98,9 +98,9 @@ jobs: flux tag artifact oci://ghcr.io/jasonthedeveloper/manifests/podinfo:${{ steps.prep.outputs.VERSION }} --tag latest - name: Sign OCI artifacts run: | - notation sign --signature-format cose ghcr.io/jasonthedeveloper/podinfo:${{ steps.prep.outputs.VERSION }} --yes - notation sign --signature-format cose ghcr.io/jasonthedeveloper/charts/podinfo:${{ steps.prep.outputs.VERSION }} --yes - notation sign --signature-format cose ghcr.io/jasonthedeveloper/manifests/podinfo:${{ steps.prep.outputs.VERSION }} --yes + notation sign --signature-format cose ghcr.io/jasonthedeveloper/podinfo:${{ steps.prep.outputs.VERSION }} + notation sign --signature-format cose ghcr.io/jasonthedeveloper/charts/podinfo:${{ steps.prep.outputs.VERSION }} + notation sign --signature-format cose ghcr.io/jasonthedeveloper/manifests/podinfo:${{ steps.prep.outputs.VERSION }} - name: Publish config artifact run: | flux push artifact oci://ghcr.io/jasonthedeveloper/podinfo-deploy:${{ steps.prep.outputs.VERSION }} \ @@ -110,5 +110,5 @@ jobs: flux tag artifact oci://ghcr.io/jasonthedeveloper/podinfo-deploy:${{ steps.prep.outputs.VERSION }} --tag latest - name: Sign config artifact run: | - notation sign --signature-format cose ghcr.io/jasonthedeveloper/podinfo-deploy:${{ steps.prep.outputs.VERSION }} --yes - notation sign --signature-format cose ghcr.io/jasonthedeveloper/podinfo-deploy:latest --yes + notation sign --signature-format cose ghcr.io/jasonthedeveloper/podinfo-deploy:${{ steps.prep.outputs.VERSION }} + notation sign --signature-format cose ghcr.io/jasonthedeveloper/podinfo-deploy:latest diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8e8fb2e..210900c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -1,9 +1,10 @@ name: release on: + pull_request: push: - tags: - - '*' + branches: + - 'master' permissions: contents: read