fix: Sign images keylessly as well

shubms · Dec 12, 2024 · 0a40c71 · 0a40c71
1 parent b707057
commit 0a40c71
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -90,11 +90,12 @@ jobs:
           for tag in ${TAGS}; do
             images+="${tag}@${DIGEST} "
           done
+          cosign sign --yes ${images}
           cosign sign --yes --key env://COSIGN_PRIVATE_KEY ${images}
 
       - name: Cleanup old images
         uses: actions/delete-package-versions@v5
         with:
           package-name: ${{ matrix.image }}
           package-type: container
-          min-versions-to-keep: 60
+          min-versions-to-keep: 30