2929 - name : ' login ghcr.io'
3030 uses : redhat-actions/podman-login@4934294ad0449894bcd1e9f191899d7292469603 # v1.7
3131 with :
32- username : ${{ github.actor }}
33- password : ${{ secrets.GITHUB_TOKEN }}
34- registry : ghcr.io/${{ github.repository_owner }}
32+ username : ' ${{ github.actor }}'
33+ password : ' ${{ secrets.GITHUB_TOKEN }}'
34+ registry : ' ghcr.io/${{ github.repository_owner }}'
3535 - name : ' login docker hub'
3636 env :
3737 DOCKER_HUB_USER : ' ${{ secrets.DOCKER_HUB_USER }}'
8080 run : echo "${COSIGN_PRIVATE_KEY}" > cosign.key
8181 - name : ' sign images with sigstore key'
8282 env :
83- COSIGN_PASSWORD : ${{ secrets.COSIGN_PASSWORD }}
83+ COSIGN_PASSWORD : ' ${{ secrets.COSIGN_PASSWORD }}'
8484 run : |
8585 cosign sign -y --key cosign.key ghcr.io/curl/curl-container/curl-multi:$REL
8686 cosign sign -y --key cosign.key ghcr.io/curl/curl-container/curl-base-multi:$REL
9696 buildah manifest push --format v2s2 --all localhost/curl-base-multi:$REL "docker://docker.io/curlimages/curl-base:latest"
9797 - name : ' sign images with a sigstore key'
9898 env :
99- COSIGN_PASSWORD : ${{ secrets.COSIGN_PASSWORD }}
99+ COSIGN_PASSWORD : ' ${{ secrets.COSIGN_PASSWORD }}'
100100 run : |
101101 cosign sign -y --key cosign.key docker.io/curlimages/curl:$REL
102102 cosign sign -y --key cosign.key docker.io/curlimages/curl:latest
@@ -116,7 +116,7 @@ jobs:
116116 buildah manifest push --format v2s2 --all localhost/curl-base-multi:$REL "docker://quay.io/curl/curl-base:latest"
117117 - name : ' sign images with a sigstore key'
118118 env :
119- COSIGN_PASSWORD : ${{ secrets.COSIGN_PASSWORD }}
119+ COSIGN_PASSWORD : ' ${{ secrets.COSIGN_PASSWORD }}'
120120 run : |
121121 cosign sign -y --key cosign.key quay.io/curl/curl:$REL
122122 cosign sign -y --key cosign.key quay.io/curl/curl:latest
0 commit comments