From f4c421afa009a76fe72f38727b6e836abd542ecd Mon Sep 17 00:00:00 2001 From: Marco Franssen Date: Mon, 26 Jun 2023 08:56:18 +0200 Subject: [PATCH] Ensure the released OCI artifact is also captured in rekor Signed-off-by: Marco Franssen --- .github/workflows/helm-release.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/helm-release.yaml b/.github/workflows/helm-release.yaml index 2526a8a..f5b31c0 100644 --- a/.github/workflows/helm-release.yaml +++ b/.github/workflows/helm-release.yaml @@ -66,3 +66,5 @@ jobs: digest="$(awk -F "[, ]+" '/Digest/{print $NF}' < .digest)" cosign sign ghcr.io/"${GITHUB_REPOSITORY_OWNER}"/helm-charts/"${name}"@"${digest}" done + env: + COSIGN_YES: true