🚑 Fix cosign verification (#44)

Signed-off-by: Jacob Woffenden <[email protected]>
ministryofjustice · Nov 29, 2023 · f01db60 · f01db60
1 parent 218fc13
commit f01db60
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -48,4 +48,7 @@ jobs:
       - name: Verify
         id: verify
         run: |
-          cosign verify ghcr.io/${{ github.repository_owner }}/data-platform-control-panel:${{ github.ref_name }}
+          cosign verify \
+          --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
+          --certificate-identity=https://github.com/${{ github.repository_owner }}/data-platform-control-panel/.github/workflows/release.yml@refs/tags/${{ github.ref_name }}
+          ghcr.io/${{ github.repository_owner }}/data-platform-control-panel:${{ github.ref_name }}