fix: make sure to sign the latest tag too

atomic-studio-org · Mar 17, 2024 · e2cd810 · e2cd810
1 parent 31ac103
commit e2cd810
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -133,6 +133,7 @@ jobs:
         shell: bash
         run: |
           cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ env.IMAGE_REGISTRY }}/${{ steps.recipes_meta.outputs.IMAGE_NAME }}@${{ steps.build_image.outputs.digest }}
+          cosign sign -y --key env://COSIGN_PRIVATE_KEY ${{ env.IMAGE_REGISTRY }}/${{ steps.recipes_meta.outputs.IMAGE_NAME }}
         env:
           COSIGN_EXPERIMENTAL: false
           COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}