almet/dangerzone
1
0
Fork 0
mirror of https://github.com/freedomofpress/dangerzone.git synced 2025-04-29 02:12:36 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 11

CI: Use a GH variable for IMAGE_URI

Browse source
This commit is contained in:
Alexis Métaireau 2025-04-28 15:09:13 +02:00
parent aca68567da
commit 1cece70173
No known key found for this signature in database
GPG key ID: C65C7A89A8FFC56E
1 changed files with 10 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
.github/workflows/build-push-image.yml vendored
View file

@ -273,8 +273,13 @@ jobs:
COSIGN_YES: true
needs:
- merge
# outputs: add signature location ?
outputs:
image_uri: ${{ steps.params.outputs.image_uri }}
steps:
- name: Prepare env
run: |-
echo "IMAGE_URI=${{ inputs.registry }}/${{ inputs.image_name }}:${{ needs.merge.outputs.tag }}@${{ needs.merge.outputs.digest_root }}" >> $GITHUB_ENV
- name: Install Cosign
uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a
with:
@ -309,15 +314,14 @@ jobs:
- name: Sign container
run: |-
export IMAGE_URI="${{ inputs.registry }}/${{ inputs.image_name }}:${{ needs.merge.outputs.tag }}@${{ needs.merge.outputs.digest_root }}"
cosign sign -d --yes --key=${{ inputs.key_name }}.key "$IMAGE_URI"
cosign sign -d --yes --key=${{ inputs.key_name }}.key "${{ env.IMAGE_URI }}"
shell: bash
- name: Get the container image from the registry
# It contains the image and the signatures
run: |-
export IMAGE_URI="${{ inputs.registry }}/${{ inputs.image_name }}:${{ needs.merge.outputs.tag }}@${{ needs.merge.outputs.digest_root }}"
cosign save $IMAGE_URI --dir dz-container
cosign save ${{ env.IMAGE_URI }} --dir dz-container
mkdir share
cd dz-container
tar -cvf ../share/container.tar .
cd ..
@ -326,7 +330,7 @@ jobs:
id: cache-container-image
uses: actions/cache@v4
with:
key: v6-container-${{ inputs.registry }}/${{ inputs.image_name }}:${{ needs.merge.outputs.tag }}@${{ needs.merge.outputs.digest_root }}"
key: v6-container-${{ env.IMAGE_URI }}
path: |-
share/container.tar