Skip to content

Commit 8412c4e

Browse files
committed
fix: add cosign registry login for Helm chart signing
The cosign sign step needs its own authentication to ghcr.io to push signature blobs. The existing helm registry login does not share credentials with cosign. Signed-off-by: Simon Lauger <simon@lauger.de>
1 parent 668a91b commit 8412c4e

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

.github/workflows/release.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -113,7 +113,9 @@ jobs:
113113
uses: sigstore/cosign-installer@v4.1.2
114114

115115
- name: Login to ghcr.io
116-
run: echo "${{ github.token }}" | helm registry login ghcr.io -u ${{ github.actor }} --password-stdin
116+
run: |
117+
echo "${{ github.token }}" | helm registry login ghcr.io -u ${{ github.actor }} --password-stdin
118+
echo "${{ github.token }}" | cosign login ghcr.io -u ${{ github.actor }} --password-stdin
117119
118120
- name: Inject version into Chart.yaml
119121
run: |

0 commit comments

Comments
 (0)