fix: image signing

Signed-off-by: Bence Csati <[email protected]>
csatib02 · Sep 2, 2024 · 94ba91c · 94ba91c
1 parent 8d0659d
commit 94ba91c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 6 deletions.
diff --git a/.github/workflows/artifacts.yaml b/.github/workflows/artifacts.yaml
@@ -9,10 +9,6 @@ on:
         default: false
         type: boolean
 
-permissions:
-  contents: read
-  packages: write
-
 jobs:
   container-image:
     name: Container-Image
@@ -90,7 +86,7 @@ jobs:
           for tag in ${TAGS}; do
             images+="${tag}@${DIGEST} "
           done
-          cosign sign --yes --key $COSIGN_PRIVATE_KEY --password-stdin $images <<< $COSIGN_PASSWORD
+          cosign sign --yes --key ${{ secrets.COSIGN_KEY }} $images
       
       - name: Upload image artifact
         uses: actions/upload-artifact@v4

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -14,5 +14,5 @@ jobs:
     with:
       publish: true
     permissions:
-      contents: read
+      contents: write
       packages: write