From b4270ae3ff60d6866018e312b544f6090f27830d Mon Sep 17 00:00:00 2001 From: James Pace Date: Tue, 8 Aug 2023 20:29:23 -0400 Subject: [PATCH] Fixes to get cosign working. --- generic-pipelines/simple-ros-pipeline.yaml | 2 +- generic-tasks/j7s-buildah.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/generic-pipelines/simple-ros-pipeline.yaml b/generic-pipelines/simple-ros-pipeline.yaml index 89917e5..2fa6167 100644 --- a/generic-pipelines/simple-ros-pipeline.yaml +++ b/generic-pipelines/simple-ros-pipeline.yaml @@ -43,7 +43,7 @@ spec: value: ./docker/Dockerfile - name: registry-login-secret-name value: $(params.registry-login-secret-name) - - names: cosign-secret-name + - name: cosign-secret-name value: container-signing-secret taskRef: name: j7s-buildah \ No newline at end of file diff --git a/generic-tasks/j7s-buildah.yaml b/generic-tasks/j7s-buildah.yaml index ab261c8..b777208 100644 --- a/generic-tasks/j7s-buildah.yaml +++ b/generic-tasks/j7s-buildah.yaml @@ -29,6 +29,7 @@ spec: # Login buildah login --tls-verify=false --username=$USERNAME --password=$PASSWORD $(params.registry) # Setup cosign. + mkdir -p ~/.sigstore cp /etc/cosign-credentials/* ~/.sigstore cat < ~/.sigstore/param-file.yaml privateKeyFile: "$HOME/.sigstore/cosign.key" @@ -71,7 +72,6 @@ spec: volumes: - name: varlibcontainers emptyDir: {} - volumes: - name: cosign-credentials secret: secretName: $(params.cosign-secret-name) \ No newline at end of file