diff --git a/sign/action.yml b/sign/action.yml index 5b06b44..52c2db5 100644 --- a/sign/action.yml +++ b/sign/action.yml @@ -28,15 +28,12 @@ runs: username: ${{ github.actor }} password: ${{ inputs.registry-token }} - - name: Install cosign - uses: sigstore/cosign-installer@v3.3.0 - - name: Sign container image shell: bash run: | REGISTRY=$(echo ${{ inputs.registry }} | awk '{print tolower($0)}') for CONTAINER in $(echo "${CONTAINERS}" | tr "," "\n"); do - cosign sign -y --key env://COSIGN_PRIVATE_KEY $REGISTRY/${CONTAINER}@${TAGS} + podman run --env-host cgr.dev/chainguard/cosign sign -y --key env://COSIGN_PRIVATE_KEY $REGISTRY/${CONTAINER}@${TAGS} done env: CONTAINERS: ${{ inputs.containers }}