mirrors/homebox
1
0
Fork 0
mirror of https://github.com/sysadminsmedia/homebox.git synced 2025-12-21 21:33:02 +01:00
Code Issues Packages Projects Releases Wiki Activity

Try keyless signing for blobs

Browse Source
This commit is contained in:
Matthew Kilgore
2025-08-23 17:51:55 -04:00
parent 62ed3fabc2
commit b7369b00ee
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
backend/.goreleaser.yaml
View File

@@ -43,11 +43,14 @@ signs:
stdin: "{{ .Env.COSIGN_PWD }}" stdin: "{{ .Env.COSIGN_PWD }}"
args: args:
- "sign-blob" - "sign-blob"
- "--key=cosign.key" - "--output-certificate=${certificate}"
- "--output-signature=${signature}" - "--output-signature=${signature}"
- "${artifact}" - "${artifact}"
- "--yes" # needed on cosign 2.0.0+ - "--yes" # needed on cosign 2.0.0+
artifacts: all artifacts: all
output:
signature: "${artifact}.sig"
certificate: "${artifact}.pem"
archives: archives:
- formats: [ 'tar.gz' ] - formats: [ 'tar.gz' ]