Have cosign login to registry
This commit is contained in:
@@ -41,7 +41,7 @@ default:
|
||||
done
|
||||
echo "TAGS=${TAGS[*]}"
|
||||
- buildah login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
|
||||
- docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
|
||||
- cosign login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
|
||||
|
||||
build:
|
||||
stage: build
|
||||
@@ -54,8 +54,8 @@ build:
|
||||
- buildah build --build-arg=RECIPE=$RECIPE --build-arg=FEDORA_MAJOR_VERSION=$FEDORA_MAJOR_VERSION --build-arg BASE_IMAGE_URL=$BASE_IMAGE_URL -t $FULL_IMAGE_NAME:${TAGS} .
|
||||
- |
|
||||
for TAG in "${TAGS[@]}"; do
|
||||
buildah tag $FULL_IMAGE_NAME:${TAGS} $FULL_IMAGE_NAME:${TAG}
|
||||
buildah tag $FULL_IMAGE_NAME:${TAGS} $FULL_IMAGE_NAME:$TAG
|
||||
buildah push $FULL_IMAGE_NAME:$TAG
|
||||
done
|
||||
- buildah push --all $FULL_IMAGE_NAME
|
||||
- DIGEST=($(buildah images --format '{{.Digest}}' $FULL_IMAGE_NAME:$TAGS))
|
||||
- cosign sign -y --key $SIGNING_SECRET $FULL_IMAGE_NAME@$DIGEST
|
||||
Reference in New Issue
Block a user