diff --git a/action.yml b/action.yml index 5272709..bc0b342 100644 --- a/action.yml +++ b/action.yml @@ -27,17 +27,18 @@ runs: uses: sigstore/cosign-installer@v3.5.0 - name: Sign image with a key + env: + TAGS: ${{ inputs.image-tags }} + COSIGN_PRIVATE_KEY: ${{ inputs.cosign-private-key }} + COSIGN_PASSWORD: ${{ inputs.cosign-password }} + DIGEST: ${{ inputs.image-digest }} run: | images="" for tag in ${TAGS}; do images+="${tag}@${DIGEST} " done cosign sign --yes --key env://COSIGN_PRIVATE_KEY ${images} - env: - TAGS: ${{ inputs.image-tags }} - COSIGN_PRIVATE_KEY: ${{ inputs.cosign-private-key }} - COSIGN_PASSWORD: ${{ inputs.cosign-password }} - DIGEST: ${{ inputs.image-digest }} + shell: bash - name: Sign the images with GitHub OIDC Token env: @@ -49,3 +50,4 @@ runs: images+="${tag}@${DIGEST} " done cosign sign --yes ${images} + shell: bash