blah

emnoor-reef · Aug 7, 2024 · 266cbea · 266cbea
1 parent 2702758
commit 266cbea
Showing 1 changed file with 9 additions and 4 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -17,15 +17,20 @@ jobs:
           IMAGE_REPO=emnoorreef/test-docker-dct
           IMAGE_TAG=$(date +%s)
           IMAGE_NAME="$IMAGE_REPO:$IMAGE_TAG"
+          DELEGATION_KEY_FILE="$HOME/.docker/trust/private/${{ secrets.DOCKERHUB_DELEGATED_KEY_ID }}.key"
           export DOCKER_CONTENT_TRUST=1
 
           echo "${{ secrets.DOCKERHUB_KEY }}" | docker login -u "${{ secrets.DOCKERHUB_USERNAME }}" --password-stdin
 
-          echo "${{ secrets.DOCKERHUB_DELEGATED_KEY}}" > repo.key
-          chmod 600 repo.key
+          mkdir -p $(dirname "$DELEGATION_KEY_FILE")
+          echo "${{ secrets.DOCKERHUB_DELEGATED_KEY}}" > "$DELEGATION_KEY_FILE"
+          chmod 600 "$DELEGATION_KEY_FILE"
+
+          # echo "${{ secrets.DOCKERHUB_DELEGATED_KEY}}" > repo.key
+          # chmod 600 repo.key
           # echo "${{ secrets.DOCKERHUB_DELEGATED_KEY_PASSPHRASE  }}" | docker trust key load repo.key
-          mkdir -p ~/.docker/trust/private
-          cp repo.key ~/.docker/trust/private/${{ secrets.DOCKERHUB_DELEGATED_KEY_ID }}.key
+          # mkdir -p ~/.docker/trust/private
+          # cp repo.key ~/.docker/trust/private/${{ secrets.DOCKERHUB_DELEGATED_KEY_ID }}.key
 
           docker trust inspect --pretty "$IMAGE_REPO" || true
           docker build -t "$IMAGE_NAME" .