github.com/venafi-iw/cosign@v1.3.4/test/ci.mk (about)

     1  ############
     2  # signing ci
     3  ############
     4  
     5  .PHONY: sign-container
     6  sign-container: ko
     7  	cosign sign --key .github/workflows/cosign-test.key -a GIT_HASH=$(GIT_HASH) ${KO_PREFIX}/cosign:$(GIT_HASH)
     8  
     9  .PHONY: sign-cosigned
    10  sign-cosigned:
    11  	cosign sign --key .github/workflows/cosign-test.key -a GIT_HASH=$(GIT_HASH) ${KO_PREFIX}/cosigned:$(GIT_HASH)
    12  
    13  .PHONY: sign-sget
    14  sign-sget:
    15  	cosign sign --key .github/workflows/cosign-test.key -a GIT_HASH=$(GIT_HASH) ${KO_PREFIX}/sget:$(GIT_HASH)
    16  
    17  .PHONY: sign-keyless-cosign
    18  sign-keyless-cosign:
    19  	cosign sign -a sha=$(GIT_HASH) -a run_id=${GITHUB_RUN_ID} -a run_attempt=${GITHUB_RUN_ATTEMPT} ${KO_PREFIX}/cosign:$(GIT_HASH)
    20  	cosign sign -a sha=$(GIT_HASH) -a run_id=${GITHUB_RUN_ID} -a run_attempt=${GITHUB_RUN_ATTEMPT} ${KO_PREFIX}/cosign:$(GIT_VERSION)
    21  
    22  .PHONY: sign-keyless-cosigned
    23  sign-keyless-cosigned:
    24  	cosign sign -a sha=$(GIT_HASH) -a run_id=${GITHUB_RUN_ID} -a run_attempt=${GITHUB_RUN_ATTEMPT} ${KO_PREFIX}/cosigned:$(GIT_HASH)
    25  	cosign sign -a sha=$(GIT_HASH) -a run_id=${GITHUB_RUN_ID} -a run_attempt=${GITHUB_RUN_ATTEMPT} ${KO_PREFIX}/cosigned:$(GIT_VERSION)
    26  
    27  .PHONY: sign-keyless-sget
    28  sign-keyless-sget:
    29  	cosign sign -a sha=$(GIT_HASH) -a run_id=${GITHUB_RUN_ID} -a run_attempt=${GITHUB_RUN_ATTEMPT} ${KO_PREFIX}/sget:$(GIT_HASH)
    30  	cosign sign -a sha=$(GIT_HASH) -a run_id=${GITHUB_RUN_ID} -a run_attempt=${GITHUB_RUN_ATTEMPT} ${KO_PREFIX}/sget:$(GIT_VERSION)
    31  
    32  .PHONY: sign-keyless-container
    33  sign-keyless-container: ko sign-keyless-cosign sign-keyless-cosigned sign-keyless-sget