diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index b9d05fa..8fc7cab 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -41,7 +41,7 @@ default: done echo "TAGS=${TAGS[*]}" - buildah login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY - - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY + - cosign login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY build: stage: build @@ -54,8 +54,8 @@ build: - buildah build --build-arg=RECIPE=$RECIPE --build-arg=FEDORA_MAJOR_VERSION=$FEDORA_MAJOR_VERSION --build-arg BASE_IMAGE_URL=$BASE_IMAGE_URL -t $FULL_IMAGE_NAME:${TAGS} . - | for TAG in "${TAGS[@]}"; do - buildah tag $FULL_IMAGE_NAME:${TAGS} $FULL_IMAGE_NAME:${TAG} + buildah tag $FULL_IMAGE_NAME:${TAGS} $FULL_IMAGE_NAME:$TAG + buildah push $FULL_IMAGE_NAME:$TAG done - - buildah push --all $FULL_IMAGE_NAME - DIGEST=($(buildah images --format '{{.Digest}}' $FULL_IMAGE_NAME:$TAGS)) - cosign sign -y --key $SIGNING_SECRET $FULL_IMAGE_NAME@$DIGEST \ No newline at end of file