Try manifest sign mode

sudo-bot · Aug 3, 2024 · 2fc0f89 · 2fc0f89
1 parent 09cf7cd
commit 2fc0f89
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -32,6 +32,8 @@ jobs:
           uses: sudo-bot/action-docker-sign@latest
           with:
             image-ref: "docker.io/botsudo/action-docker-compose:latest"
+            # Sign the manifest
+            sign-manifest: true
             private-key-id: "${{ vars.DOCKER_PRIVATE_KEY_ID }}"
             private-key: ${{ secrets.DOCKER_PRIVATE_KEY }}
             private-key-passphrase: ${{ secrets.DOCKER_PRIVATE_KEY_PASSPHRASE }}