set cosign private key

fkie-cad · Dec 17, 2024 · 61a2f38 · 61a2f38
1 parent 25074df
commit 61a2f38
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -191,3 +191,5 @@ jobs:
       - name: Attach SBOM attestation to image
         run: |
           cosign attest --key env://COSIGN_PRIVATE_KEY --predicate py${{ matrix.python-version }}-${{ github.head_ref }}.spdx.json ghcr.io/fkie-cad/logprep:py${{ matrix.python-version }}-${{ github.head_ref }}@${{ steps.build-and-push.outputs.digest }}
+        env:
+          COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}