@@ -39,16 +39,16 @@ jobs:
3939
4040 # Install the cosign tool except on PR
4141 # https://github.com/sigstore/cosign-installer
42- - name : Install cosign
43- if : github.event_name != 'pull_request'
44- uses : sigstore/cosign-installer@f3c664df7af409cb4873aa5068053ba9d61a57b6 # v2.6.0
45- with :
46- cosign-release : ' v1.13.1'
42+ # - name: Install cosign
43+ # if: github.event_name != 'pull_request'
44+ # uses: sigstore/cosign-installer@f3c664df7af409cb4873aa5068053ba9d61a57b6 #v2.6.0
45+ # with:
46+ # cosign-release: 'v1.13.1'
4747
4848
4949 # Workaround: https://github.com/docker/build-push-action/issues/461
50- - name : Setup Docker buildx
51- uses : docker/setup-buildx-action@v2.5.0
50+ # - name: Setup Docker buildx
51+ # uses: docker/setup-buildx-action@v2.5.0
5252
5353 # Login against a Docker registry except on PR
5454 # https://github.com/docker/login-action
6767 uses : docker/metadata-action@v4.3.0
6868 with :
6969 images : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
70- labels : |
71- org.opencontainers.image.title=Microservices Workshop
72- org.opencontainers.image.description=Development Image with VSCode for a Workshop on Microservices
73- org.opencontainers.image.licenses=MIT
74-
7570
76- # Build and push Docker image with Buildx (don't push on PR)
71+ # Build and push Docker image (don't push on PR)
7772 # https://github.com/docker/build-push-action
7873 - name : Build and push Docker image
7974 id : build-and-push
@@ -84,20 +79,20 @@ jobs:
8479 push : ${{ github.event_name != 'pull_request' }}
8580 tags : ${{ steps.meta.outputs.tags }}
8681 labels : ${{ steps.meta.outputs.labels }}
87- cache-from : type=gha
88- cache-to : type=gha,mode=max
82+ # cache-from: type=gha
83+ # cache-to: type=gha,mode=max
8984
9085
9186 # Sign the resulting Docker image digest except on PRs.
9287 # This will only write to the public Rekor transparency log when the Docker
9388 # repository is public to avoid leaking data. If you would like to publish
9489 # transparency data even for private images, pass --force to cosign below.
9590 # https://github.com/sigstore/cosign
96- - name : Sign the published Docker image
97- if : ${{ github.event_name != 'pull_request' }}
98- env :
99- COSIGN_EXPERIMENTAL : " true"
100- # This step uses the identity token to provision an ephemeral certificate
101- # against the sigstore community Fulcio instance.
102- run : echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign sign {}@${{ steps.build-and-push.outputs.digest }}
91+ # - name: Sign the published Docker image
92+ # if: ${{ github.event_name != 'pull_request' }}
93+ # env:
94+ # COSIGN_EXPERIMENTAL: "true"
95+ # # This step uses the identity token to provision an ephemeral certificate
96+ # # against the sigstore community Fulcio instance.
97+ # run: echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign sign {}@${{ steps.build-and-push.outputs.digest }}
10398
0 commit comments