Merge pull request tmforum-oda#424 from tmforum-oda/cosignkey

fix: fixing the cosign key issue
wangyumu · Dec 18, 2024 · 81ed1b7 · 81ed1b7
2 parents b13debd + 80459b9
commit 81ed1b7
Show file tree

Hide file tree

Showing 13 changed files with 13 additions and 13 deletions.
diff --git a/.github/workflows/dockerbuild-release-api-operator-istio.yml b/.github/workflows/dockerbuild-release-api-operator-istio.yml
@@ -95,6 +95,6 @@ jobs:
 
       - name: Sign Docker image
         run: |
-          echo ${{ secrets.COSIGN_KEY }} > cosign.key
+          echo "${{ secrets.COSIGN_KEY }}" | base64 --decode > cosign.key
           chmod 600 cosign.key
           cosign sign --key cosign.key --tlog-upload=true --yes ${{ steps.get_values_image.outputs.result }}:${{ steps.get_values_version.outputs.result }}
diff --git a/.github/workflows/dockerbuild-release-apisix-gateway.yml b/.github/workflows/dockerbuild-release-apisix-gateway.yml
@@ -95,6 +95,6 @@ jobs:
 
       - name: Sign Docker image
         run: |
-          echo ${{ secrets.COSIGN_KEY }} > cosign.key
+          echo "${{ secrets.COSIGN_KEY }}" | base64 --decode > cosign.key
           chmod 600 cosign.key
           cosign sign --key cosign.key --tlog-upload=true --yes ${{ steps.get_values_image.outputs.result }}:${{ steps.get_values_version.outputs.result }}
diff --git a/.github/workflows/dockerbuild-release-baseimage-kubectl-curl.yml b/.github/workflows/dockerbuild-release-baseimage-kubectl-curl.yml
@@ -94,6 +94,6 @@ jobs:
 
       - name: Sign Docker image
         run: |
-          echo ${{ secrets.COSIGN_KEY }} > cosign.key
+          echo "${{ secrets.COSIGN_KEY }}" | base64 --decode > cosign.key
           chmod 600 cosign.key
           cosign sign --key cosign.key --tlog-upload=true --yes ${{ steps.get_values_image.outputs.result }}:${{ steps.get_values_version.outputs.result }}
diff --git a/.github/workflows/dockerbuild-release-compcrdwebhook.yml b/.github/workflows/dockerbuild-release-compcrdwebhook.yml
@@ -96,6 +96,6 @@ jobs:
 
       - name: Sign Docker image
         run: |
-          echo ${{ secrets.COSIGN_KEY }} > cosign.key
+          echo "${{ secrets.COSIGN_KEY }}" | base64 --decode > cosign.key
           chmod 600 cosign.key
           cosign sign --key cosign.key --tlog-upload=true --yes ${{ steps.get_values_image.outputs.result }}:${{ steps.get_values_version.outputs.result }}
diff --git a/.github/workflows/dockerbuild-release-component-operator.yml b/.github/workflows/dockerbuild-release-component-operator.yml
@@ -95,6 +95,6 @@ jobs:
 
       - name: Sign Docker image
         run: |
-          echo ${{ secrets.COSIGN_KEY }} > cosign.key
+          echo "${{ secrets.COSIGN_KEY }}" | base64 --decode > cosign.key
           chmod 600 cosign.key
           cosign sign --key cosign.key --tlog-upload=true --yes ${{ steps.get_values_image.outputs.result }}:${{ steps.get_values_version.outputs.result }}
diff --git a/.github/workflows/dockerbuild-release-dependentapi-simple-operator.yml b/.github/workflows/dockerbuild-release-dependentapi-simple-operator.yml
@@ -135,6 +135,6 @@ jobs:
 
       - name: Sign Docker image
         run: |
-          echo ${{ secrets.COSIGN_KEY }} > cosign.key
+          echo "${{ secrets.COSIGN_KEY }}" | base64 --decode > cosign.key
           chmod 600 cosign.key
           cosign sign --key cosign.key --tlog-upload=true --yes ${{ steps.get_values_image.outputs.result }}:${{ steps.get_values_version.outputs.result }}
diff --git a/.github/workflows/dockerbuild-release-identity-listener-keycloak.yml b/.github/workflows/dockerbuild-release-identity-listener-keycloak.yml
@@ -96,6 +96,6 @@ jobs:
 
       - name: Sign Docker image
         run: |
-          echo ${{ secrets.COSIGN_KEY }} > cosign.key
+          echo "${{ secrets.COSIGN_KEY }}" | base64 --decode > cosign.key
           chmod 600 cosign.key
           cosign sign --key cosign.key --tlog-upload=true --yes ${{ steps.get_values_image.outputs.result }}:${{ steps.get_values_version.outputs.result }}
diff --git a/.github/workflows/dockerbuild-release-identityconfig-operator-keycloak.yml b/.github/workflows/dockerbuild-release-identityconfig-operator-keycloak.yml
@@ -95,6 +95,6 @@ jobs:
 
       - name: Sign Docker image
         run: |
-          echo ${{ secrets.COSIGN_KEY }} > cosign.key
+          echo "${{ secrets.COSIGN_KEY }}" | base64 --decode > cosign.key
           chmod 600 cosign.key
           cosign sign --key cosign.key --tlog-upload=true --yes ${{ steps.get_values_image.outputs.result }}:${{ steps.get_values_version.outputs.result }}
diff --git a/.github/workflows/dockerbuild-release-kong-gateway.yml b/.github/workflows/dockerbuild-release-kong-gateway.yml
@@ -95,6 +95,6 @@ jobs:
 
       - name: Sign Docker image
         run: |
-          echo ${{ secrets.COSIGN_KEY }} > cosign.key
+          echo "${{ secrets.COSIGN_KEY }}" | base64 --decode > cosign.key
           chmod 600 cosign.key
           cosign sign --key cosign.key --tlog-upload=true --yes ${{ steps.get_values_image.outputs.result }}:${{ steps.get_values_version.outputs.result }}
diff --git a/.github/workflows/dockerbuild-release-secretsmanagement-operator.yml b/.github/workflows/dockerbuild-release-secretsmanagement-operator.yml
@@ -94,6 +94,6 @@ jobs:
 
       - name: Sign Docker image
         run: |
-          echo ${{ secrets.COSIGN_KEY }} > cosign.key
+          echo "${{ secrets.COSIGN_KEY }}" | base64 --decode > cosign.key
           chmod 600 cosign.key
           cosign sign --key cosign.key --tlog-upload=true --yes ${{ steps.get_values_image.outputs.result }}:${{ steps.get_values_version.outputs.result }}
diff --git a/.github/workflows/dockerbuild-release-secretsmanagement-sidecar.yml b/.github/workflows/dockerbuild-release-secretsmanagement-sidecar.yml
@@ -94,6 +94,6 @@ jobs:
 
       - name: Sign Docker image
         run: |
-          echo ${{ secrets.COSIGN_KEY }} > cosign.key
+          echo "${{ secrets.COSIGN_KEY }}" | base64 --decode > cosign.key
           chmod 600 cosign.key
           cosign sign --key cosign.key --tlog-upload=true --yes ${{ steps.get_values_image.outputs.result }}:${{ steps.get_values_version.outputs.result }}
diff --git a/.github/workflows/dockerbuild-release-tmf638-service-inventory-api.yml b/.github/workflows/dockerbuild-release-tmf638-service-inventory-api.yml
@@ -94,6 +94,6 @@ jobs:
 
       - name: Sign Docker image
         run: |
-          echo ${{ secrets.COSIGN_KEY }} > cosign.key
+          echo "${{ secrets.COSIGN_KEY }}" | base64 --decode > cosign.key
           chmod 600 cosign.key
           cosign sign --key cosign.key --tlog-upload=true --yes ${{ steps.get_values_image.outputs.result }}:${{ steps.get_values_version.outputs.result }}
diff --git a/...mation/generators/dockerbuild-workflow-generator/templates/dockerbuild-release.yml.jinja2 b/...mation/generators/dockerbuild-workflow-generator/templates/dockerbuild-release.yml.jinja2
@@ -143,6 +143,6 @@ jobs:
 
       - name: Sign Docker image
         run: |
-          echo ${% raw %}{{ secrets.COSIGN_KEY }}{% endraw %} > cosign.key
+          echo "${% raw %}{{ secrets.COSIGN_KEY }}{% endraw %}" | base64 --decode > cosign.key
           chmod 600 cosign.key
           cosign sign --key cosign.key --tlog-upload=true --yes ${% raw %}{{ steps.get_values_image.outputs.result }}{% endraw %}:${% raw %}{{ steps.get_values_version.outputs.result }}{% endraw %}