Merge db9652742a into 83be5fb151

CI: Add an option to attach container signatures to the registry
The `build-push-image.yml` reusable workflow can generate keypairs and sign the container images with them. This is only used by the CI, to test that a valid signature is actually detected as such.
2025-04-28 18:02:38 +02:00 · 2025-04-25 08:51:24 +00:00 · 2025-04-25 10:51:16 +02:00
1 changed files with 2 additions and 0 deletions
--- a/.github/workflows/build-push-image.yml
+++ b/.github/workflows/build-push-image.yml
@ -272,6 +272,8 @@ jobs:
    steps:
      - name: Install Cosign
        uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a
+        with:
+          cosign-release: 'v2.5.0'
      - name: Check install
        run: cosign version
      - name: Generate keypair
Author	SHA1	Message	Date
Alexis Métaireau	7135910ad8	Merge `db9652742a` into `83be5fb151`	2025-04-25 08:51:24 +00:00
Alexis Métaireau	db9652742a	CI: Add an option to attach container signatures to the registry The `build-push-image.yml` reusable workflow can generate keypairs and sign the container images with them. This is only used by the CI, to test that a valid signature is actually detected as such.	2025-04-25 10:51:16 +02:00