woodpecker-plugins/cosign-sign
1
0
Fork 0
generated from woodpecker-plugins/.plugin-template
Code Issues Pull requests Projects Releases Packages Wiki Activity

ci(release.yaml): use container-tools base image with cosign to run shell with cosign to sign image

Browse source 
Signed-off-by: Vojtěch Mareš <vojtech@mares.cz>
This commit is contained in:
Vojtěch Mareš 2025-09-08 22:19:54 +02:00
parent 2c17c2d90c
commit 4b6507aa28
Signed by: vojtech.mares
GPG key ID: C6827B976F17240D
1 changed files with 8 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

18
.woodpecker/release.yaml
View file

@ -10,6 +10,7 @@ variables:
- &buildx-plugin "woodpeckerci/plugin-docker-buildx:6.0.2"
- &repo "registry.mareshq.com/woodpecker-plugins/cosign-sign"
- &platforms "linux/arm64/v8,linux/amd64"
- &container_tools_image "registry.mareshq.com/library/container-tools:commit-4870dfe6aab84eb0"
steps:
publish-next:
@ -52,20 +53,17 @@ steps:
- echo $COSIGN_KEY > ./cosign.key
sign-next:
image: registry.mareshq.com/woodpecker-plugins/cosign-sign:next
settings:
images:
- registry.mareshq.com/woodpecker-plugins/cosign-sign:next
- registry.mareshq.com/woodpecker-plugins/cosign-sign:next
image: *container_tools_image
commands:
- cosign sign --key ./cosign.key --recursive registry.mareshq.com/woodpecker-plugins/cosign-sign:next
when:
event: push
branch: main
sign-tag:
image: registry.mareshq.com/woodpecker-plugins/cosign-sign:next
settings:
images:
- registry.mareshq.com/woodpecker-plugins/cosign-sign:latest
- registry.mareshq.com/woodpecker-plugins/cosign-sign:${CI_COMMIT_TAG}
image: *container_tools_image
commands:
- cosign sign --key ./cosign.key --recursive registry.mareshq.com/woodpecker-plugins/cosign-sign:latest
- cosign sign --key ./cosign.key --recursive registry.mareshq.com/woodpecker-plugins/cosign-sign:${CI_COMMIT_TAG}
when:
event: tag