Fix the cosign step to authenticate with the container registry

Change-Id: I8b5fd63128b7c661c438c9cff9e8a4a3e487712b Signed-off-by: Cosmin Cojocar <[email protected]>
securego · Oct 1, 2024 · 15878b6 · 15878b6
1 parent 50d1b4a
commit 15878b6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -69,7 +69,7 @@ jobs:
           push: true
           build-args: GO_VERSION=1.23
       - name: Sign Docker Image
-        run: cosign sign --yes --key /tmp/cosign.key ${DIGEST}
+        run: cosign sign --yes --key /tmp/cosign.key ${DIGEST} --registry-username="$secrets.DOCKER_USERNAME" --registry-password="::add-mask::$secrets.DOCKER_PASSWORD"
         env:
           TAGS: ${{steps.meta.outputs.tags}}
           COSIGN_PASSWORD: ${{secrets.COSIGN_PASSWORD}}