From ee2f4a2d09b92448c4178cf42d0c4682bd203957 Mon Sep 17 00:00:00 2001 From: Steve Wagner Date: Mon, 18 Nov 2024 16:04:48 -0800 Subject: [PATCH] Needs --yes flag --- .github/workflows/build-and-sign-image.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build-and-sign-image.yml b/.github/workflows/build-and-sign-image.yml index 41beacc6..50b087d8 100644 --- a/.github/workflows/build-and-sign-image.yml +++ b/.github/workflows/build-and-sign-image.yml @@ -65,7 +65,7 @@ jobs: COSIGN_EXPERIMENTAL: "true" # This step uses the identity token to provision an ephemeral certificate # against the sigstore community Fulcio instance. - run: cosign sign "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.docker-build-and-push.outputs.digest }}" + run: cosign sign --yes "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.docker-build-and-push.outputs.digest }}" # NOTE: This runs statically against the latest tag in Docker Hub which was not produced by this workflow # This should be updated once this workflow is fully implemented