mirror of
https://github.com/ossf/scorecard.git
synced 2024-08-15 19:30:40 +03:00
🌱 bump publishimage version (#4028)
* bump version Signed-off-by: Spencer Schrock <sschrock@google.com> * only publish images for tagged releases or candidates. Signed-off-by: Spencer Schrock <sschrock@google.com> --------- Signed-off-by: Spencer Schrock <sschrock@google.com>
This commit is contained in:
parent
8789bbbbfc
commit
252eee2f68
7
.github/workflows/publishimage.yml
vendored
7
.github/workflows/publishimage.yml
vendored
@ -18,8 +18,9 @@ permissions: read-all
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
# only publish ghcr images for releases
|
||||
tags:
|
||||
- v*
|
||||
|
||||
env:
|
||||
GO_VERSION: 1.22
|
||||
@ -64,4 +65,4 @@ jobs:
|
||||
uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
|
||||
- name: Sign image
|
||||
run: |
|
||||
cosign sign --yes ghcr.io/${{github.repository_owner}}/scorecard/v4:${{ github.sha }}
|
||||
cosign sign --yes ghcr.io/${{github.repository_owner}}/scorecard/v5:${{ github.sha }}
|
||||
|
Loading…
Reference in New Issue
Block a user