Try fix for cosign authN issue

soubinan · Dec 2, 2023 · b805889 · b805889
1 parent a97cfb9
commit b805889
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -49,7 +49,7 @@ jobs:
             --label "org.opencontainers.image.source=${{ env.PROJECT_URL }}"
             --label "org.opencontainers.image.url=${{ env.PROJECT_URL }}"
             --label "org.opencontainers.image.title=XOA-Container"
-            --label "org.opencontainers.image.description=XEN Orchestra As a Container: Build from XO-Server v$XO_SERVER and XO-Web v$XO_WEB"
+            --label "org.opencontainers.image.description=XEN Orchestra As a Container: Build from XO-Server $XO_SERVER and XO-Web $XO_WEB"
             --label "org.opencontainers.image.licenses=CC-BY-NC"
       - name: Install cosign
         if: github.event_name == 'release'
@@ -83,9 +83,7 @@ jobs:
       - name: Sign the published container images
         if: github.event_name == 'release'
         run: |
-          cosign sign --yes --key env://COSIGN_PRIVATE_KEY "${TAGS}@${DIGEST}"
+          cosign sign --yes "${TAGS}@${DIGEST}"
         env:
           TAGS: ${{ steps.meta.outputs.tags }}
           DIGEST: ${{ steps.build-and-push.outputs.digest }}
-          COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
-          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}