Fix signing for the cosigned image. (#634)

Signed-off-by: Dan Lorenc <dlorenc@google.com>
sigstore · Sep 8, 2021 · efde83c · efde83c
1 parent 508cc59
commit efde83c
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -50,3 +50,5 @@ jobs:
         run: gcloud auth configure-docker --quiet
       - name: container
         run: echo -n "${{secrets.COSIGN_PASSWORD}}" | KO_PREFIX=gcr.io/projectsigstore/cosign/ci make sign-container
+      - name: cosigned
+        run: echo -n "${{secrets.COSIGN_PASSWORD}}" | KO_PREFIX=gcr.io/projectsigstore/cosign/ci make sign-cosigned
diff --git a/Makefile b/Makefile
@@ -102,6 +102,9 @@ ko-local:
 .PHONY: sign-container
 sign-container: ko
 	cosign sign -key .github/workflows/cosign.key -a GIT_HASH=$(GIT_HASH) ${KO_PREFIX}/cosign:$(GIT_HASH)
+
+.PHONY: sign-cosigned
+sign-cosigned:
 	cosign sign -key .github/workflows/cosign.key -a GIT_HASH=$(GIT_HASH) ${KO_PREFIX}/cosigned:$(GIT_HASH)
 
 # used when releasing together with GCP CloudBuild