github.com/venafi-iw/cosign@v1.3.4/test/ci.mk (about) 1 ############ 2 # signing ci 3 ############ 4 5 .PHONY: sign-container 6 sign-container: ko 7 cosign sign --key .github/workflows/cosign-test.key -a GIT_HASH=$(GIT_HASH) ${KO_PREFIX}/cosign:$(GIT_HASH) 8 9 .PHONY: sign-cosigned 10 sign-cosigned: 11 cosign sign --key .github/workflows/cosign-test.key -a GIT_HASH=$(GIT_HASH) ${KO_PREFIX}/cosigned:$(GIT_HASH) 12 13 .PHONY: sign-sget 14 sign-sget: 15 cosign sign --key .github/workflows/cosign-test.key -a GIT_HASH=$(GIT_HASH) ${KO_PREFIX}/sget:$(GIT_HASH) 16 17 .PHONY: sign-keyless-cosign 18 sign-keyless-cosign: 19 cosign sign -a sha=$(GIT_HASH) -a run_id=${GITHUB_RUN_ID} -a run_attempt=${GITHUB_RUN_ATTEMPT} ${KO_PREFIX}/cosign:$(GIT_HASH) 20 cosign sign -a sha=$(GIT_HASH) -a run_id=${GITHUB_RUN_ID} -a run_attempt=${GITHUB_RUN_ATTEMPT} ${KO_PREFIX}/cosign:$(GIT_VERSION) 21 22 .PHONY: sign-keyless-cosigned 23 sign-keyless-cosigned: 24 cosign sign -a sha=$(GIT_HASH) -a run_id=${GITHUB_RUN_ID} -a run_attempt=${GITHUB_RUN_ATTEMPT} ${KO_PREFIX}/cosigned:$(GIT_HASH) 25 cosign sign -a sha=$(GIT_HASH) -a run_id=${GITHUB_RUN_ID} -a run_attempt=${GITHUB_RUN_ATTEMPT} ${KO_PREFIX}/cosigned:$(GIT_VERSION) 26 27 .PHONY: sign-keyless-sget 28 sign-keyless-sget: 29 cosign sign -a sha=$(GIT_HASH) -a run_id=${GITHUB_RUN_ID} -a run_attempt=${GITHUB_RUN_ATTEMPT} ${KO_PREFIX}/sget:$(GIT_HASH) 30 cosign sign -a sha=$(GIT_HASH) -a run_id=${GITHUB_RUN_ID} -a run_attempt=${GITHUB_RUN_ATTEMPT} ${KO_PREFIX}/sget:$(GIT_VERSION) 31 32 .PHONY: sign-keyless-container 33 sign-keyless-container: ko sign-keyless-cosign sign-keyless-cosigned sign-keyless-sget