ci: call cosign to sign multiple tags

Signed-off-by: Alex Szakaly <alex.szakaly@gmail.com>
alex1989hu · Feb 1, 2024 · 733cb8f · 733cb8f
1 parent 36e9d20
commit 733cb8f
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/.github/workflows/image-publish.yml b/.github/workflows/image-publish.yml
@@ -54,7 +54,13 @@ jobs:
         push: true
         tags: ${{ steps.docker_meta.outputs.tags }}
     - name: Sign the container images
-      run: cosign sign --yes ${TAGS}
+      run: |
+        images=""
+        for tag in ${TAGS}; do
+          images+="${tag}@${DIGEST} "
+        done
+        cosign sign --yes ${images}
       env:
         TAGS: ${{ steps.docker_meta.outputs.tags }}
         COSIGN_EXPERIMENTAL: 1
+        DIGEST: ${{ steps.build-and-push.outputs.digest }}