Fix for cosign workflow step

soubinan · Dec 23, 2023 · 01d3001 · 01d3001
1 parent 04e9018
commit 01d3001
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -66,7 +66,11 @@ jobs:
       - name: Sign the published container images
         if: github.event_name == 'release'
         run: |
-          cosign sign --yes --key env://COSIGN_PRIVATE_KEY "${TAGS}@${DIGEST}"
+          images=""
+          for tag in ${TAGS}; do
+            images+="${tag}@${DIGEST} "
+          done
+          cosign sign --yes --key env://COSIGN_PRIVATE_KEY ${images}
         env:
           TAGS: ${{ steps.meta.outputs.tags }}
           DIGEST: ${{ steps.build-and-push.outputs.digest }}