From deba7710e60f618b6659407440fc400ecc323d73 Mon Sep 17 00:00:00 2001
From: saurav631 <saurav.d.kumar@pwc.com>
Date: Wed, 14 Aug 2024 13:33:28 +0530
Subject: [PATCH] Update maven-build.yml

---
 .github/workflows/maven-build.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/maven-build.yml b/.github/workflows/maven-build.yml
index 80af3c8aa27..f974a5fdd68 100644
--- a/.github/workflows/maven-build.yml
+++ b/.github/workflows/maven-build.yml
@@ -239,7 +239,11 @@ jobs:
 
       - name: Public Key Creation
         run: |
-          cosign public-key --key cosign.key > cosign.pub
+          cosign public-key --key env://COSIGN_KEY > cosign.pub
+        shell: bash
+        env:
+          COSIGN_KEY: ${{secrets.Cosign_Key}}
+          COSIGN_PASSWORD: ${{secrets.Cosign_Key_Password}}
         
       - name: Verify Docker Image Signature
         run: |