fix(sign-container): avoid running signing step if public (#50)

LedgerHQ · Nov 7, 2024 · ce43304 · ce43304
1 parent 24938ea
commit ce43304
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/actions/sign-container/action.yml b/actions/sign-container/action.yml
@@ -22,8 +22,10 @@ runs:
       shell: bash
       run: echo "This action only runs on public repositories. To avoid leaking private information, the action will be stopped."
     - name: Install Cosign
+      if: ${{ github.event.repository.visibility == 'public' }}
       uses: sigstore/cosign-installer@v3
     - name: Sign containers images
+      if: ${{ github.event.repository.visibility == 'public' }}
       shell: bash
       env:
         TAGS: ${{ inputs.tags }}