cosign-sign/docs.md
Vojtěch Mareš a93217ce90
Some checks failed
ci/woodpecker/push/release Pipeline failed
refactor: sign multiple images instead of only one
Signed-off-by: Vojtěch Mareš <vojtech@mares.cz>
2025-09-08 15:21:52 +02:00

31 lines
1 KiB
Markdown

---
name: Cosign Sign
icon: https://codeberg.org/woodpecker-plugins/prettier/raw/branch/main/prettier.png
description: Sign OCI artifacts with Cosign.
author: Vojtěch Mareš
tags: [oci, cosign, sign, security]
containerImage: registry.mareshq.com/woodpecker-plugins/cosign-sign
containerImageUrl: https://registry.mareshq.com/woodpecker-plugins/cosign-sign
url: https://git.mareshq.com/woodpecker-plugins/cosign-sign
---
# cosign-sign
## Sample
```yaml
steps:
prettier:
image: registry.mareshq.com/woodpecker-plugins/cosign-sign
settings:
images:
- registry.example.com/app:latest
- registry.example.com/app:v1
```
## Settings
| Settings Name | Type | Default | Description |
| ------------- | ------- | ------- | --------------------------------------------------------------------------- |
| `images` | string | empty | List of image names including tag. |
| `key_path` | string | `./cosign.key` | Path to signing key |