From 01d3001359873bec5dee8810fcc56c484c21b6c2 Mon Sep 17 00:00:00 2001
From: Soubinan <contact@soubinan.tk>
Date: Sat, 23 Dec 2023 01:00:33 -0500
Subject: [PATCH] Fix for cosign workflow step

---
 .github/workflows/build.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3f4a7f7..dbd1b2e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -66,7 +66,11 @@ jobs:
       - name: Sign the published container images
         if: github.event_name == 'release'
         run: |
-          cosign sign --yes --key env://COSIGN_PRIVATE_KEY "${TAGS}@${DIGEST}"
+          images=""
+          for tag in ${TAGS}; do
+            images+="${tag}@${DIGEST} "
+          done
+          cosign sign --yes --key env://COSIGN_PRIVATE_KEY ${images}
         env:
           TAGS: ${{ steps.meta.outputs.tags }}
           DIGEST: ${{ steps.build-and-push.outputs.digest }}