Skip to content

Commit

Permalink
build: reduce cosign to a minimum
Browse files Browse the repository at this point in the history
  • Loading branch information
cmuench committed Dec 20, 2024
1 parent 0a061d8 commit 142ad08
Showing 1 changed file with 1 addition and 15 deletions.
16 changes: 1 addition & 15 deletions .github/workflows/deploy.yml
Original file line number Diff line number Diff line change
Expand Up @@ -53,21 +53,7 @@ jobs:

- name: Sign PHAR file using Cosign
run: |
INDEX=$(cosign sign-blob --yes --output-signature n98-magerun2.phar.sig n98-magerun2.phar | grep -oP "tlog entry created with index: \K[0-9]+")
if [ -z "$INDEX" ]; then
echo "Error: Transparency Log Entry Index not found!" >&2
exit 1
fi
echo "Transparency Log Entry Index: $INDEX"
echo "REKOR_ENTRY_INDEX=$INDEX" >> $GITHUB_ENV
- name: Display Rekor Transparency Log URL
run: |
echo "Rekor Transparency Log Entry: https://rekor.sigstore.dev/api/v1/log/entries/$REKOR_ENTRY_INDEX"
- name: Create Rekor Annotation
run: |
echo "::notice file=n98-magerun2.phar::Rekor Transparency Log Entry: https://rekor.sigstore.dev/api/v1/log/entries/$REKOR_ENTRY_INDEX"
cosign sign-blob --yes --output-signature n98-magerun2.phar.sig n98-magerun2.phar
- name: Import GPG key
uses: crazy-max/ghaction-import-gpg@v6
Expand Down

0 comments on commit 142ad08

Please sign in to comment.