From e329be4ac85ad2f24ecb45c651bb02806762deb3 Mon Sep 17 00:00:00 2001
From: Martijn de Boer <git@sexybiggetje.nl>
Date: Fri, 5 Jan 2024 14:25:45 +0100
Subject: [PATCH] Update docker-publish.yml

---
 .github/workflows/docker-publish.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index d487ec7..8c65495 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -54,10 +54,8 @@ jobs:
         id: build-and-push
         run: |
           docker-compose build
-          DOCKER_OUTPUT=$(docker-compose push)
-          echo "${DOCKER_OUTPUT}" 
-          DIGEST=$(echo "${DOCKER_OUTPUT}" | grep -oP '(?<=digest: ).*')
-          echo "DIGEST=${DIGEST}" >> $GITHUB_ENV
+          DOCKER_IMAGE=$(docker-compose images --format "{{.Repository}}:{{.Tag}}")
+          docker-compose push
         env:
           DOCKER_BUILDKIT: 1
     
@@ -65,5 +63,7 @@ jobs:
         if: ${{ github.event_name != 'pull_request' }}
         env:
           TAGS: ${{ steps.meta.outputs.tags }}
-          DIGEST: ${{ env.DIGEST }}
-        run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
+        run: |
+          for tag in ${TAGS}; do
+            cosign sign --key /path/to/your/private-key.key --skopeo-repo docker://${DOCKER_IMAGE}:${tag} --upload-signature
+          done