🌱 bump publishimage version (#4028)

* bump version

Signed-off-by: Spencer Schrock <sschrock@google.com>

* only publish images for tagged releases or candidates.

Signed-off-by: Spencer Schrock <sschrock@google.com>

---------

Signed-off-by: Spencer Schrock <sschrock@google.com>
This commit is contained in:
Spencer Schrock 2024-04-24 10:27:28 -07:00 committed by GitHub
parent 8789bbbbfc
commit 252eee2f68
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -18,8 +18,9 @@ permissions: read-all
on:
push:
branches:
- main
# only publish ghcr images for releases
tags:
- v*
env:
GO_VERSION: 1.22
@ -64,4 +65,4 @@ jobs:
uses: sigstore/cosign-installer@e1523de7571e31dbe865fd2e80c5c7c23ae71eb4
- name: Sign image
run: |
cosign sign --yes ghcr.io/${{github.repository_owner}}/scorecard/v4:${{ github.sha }}
cosign sign --yes ghcr.io/${{github.repository_owner}}/scorecard/v5:${{ github.sha }}