Browse Source

fix: cosign verify does not use signing config (#5982)

Signed-off-by: Gustavo Carvalho <gustavo.carvalho@container-solutions.com>
Gustavo Fernandes de Carvalho 1 month ago
parent
commit
eaa505d90a
1 changed files with 1 additions and 1 deletions
  1. 1 1
      .github/workflows/helm.yml

+ 1 - 1
.github/workflows/helm.yml

@@ -158,7 +158,7 @@ jobs:
 
             artifact_digest_uri="${chart_registry}/${chart_name}@${digest}"
             cosign sign --yes --new-bundle-format=false --use-signing-config=false "$artifact_digest_uri"
-            cosign verify --new-bundle-format=false --use-signing-config=false "$artifact_digest_uri" \
+            cosign verify --new-bundle-format=false "$artifact_digest_uri" \
                 --certificate-identity-regexp "https://github.com/$GITHUB_REPOSITORY/.*" \
                 --certificate-oidc-issuer https://token.actions.githubusercontent.com