diff --git a/.github/workflows/build-unified.yml b/.github/workflows/build-unified.yml index ad798cb..b5f0103 100644 --- a/.github/workflows/build-unified.yml +++ b/.github/workflows/build-unified.yml @@ -165,7 +165,7 @@ jobs: - name: Verify the signed image(s) with Cosign if: env.is_publish_branch == 'true' run: | - cosign verify + cosign verify \ --certificate-identity "${{ github.server_url }}/${{ github.workflow_ref }}" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ${{ steps.sign.outputs.images }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d9c03dd..f2e7d32 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -298,8 +298,15 @@ jobs: - name: Verify the signed image with Cosign run: | - cosign verify --certificate-identity "${{ github.server_url }}/${{ github.workflow_ref }}" --certificate-oidc-issuer "https://token.actions.githubusercontent.com" ghcr.io/bitwarden/$_PROJECT_NAME:$_RELEASE_TAG - cosign verify --certificate-identity "${{ github.server_url }}/${{ github.workflow_ref }}" --certificate-oidc-issuer "https://token.actions.githubusercontent.com" ghcr.io/bitwarden/$_PROJECT_NAME:latest + cosign verify \ + --certificate-identity "${{ github.server_url }}/${{ github.workflow_ref }}" \ + --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ + ghcr.io/bitwarden/$_PROJECT_NAME:$_RELEASE_TAG + + cosign verify \ + --certificate-identity "${{ github.server_url }}/${{ github.workflow_ref }}" \ + --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ + ghcr.io/bitwarden/$_PROJECT_NAME:latest - name: Log out of Docker run: | @@ -406,8 +413,15 @@ jobs: - name: Verify the signed image with Cosign run: | - cosign verify --certificate-identity "${{ github.server_url }}/${{ github.workflow_ref }}" --certificate-oidc-issuer "https://token.actions.githubusercontent.com" ghcr.io/bitwarden/self-host:$_RELEASE_TAG - cosign verify --certificate-identity "${{ github.server_url }}/${{ github.workflow_ref }}" --certificate-oidc-issuer "https://token.actions.githubusercontent.com" ghcr.io/bitwarden/self-host:latest + cosign verify \ + --certificate-identity "${{ github.server_url }}/${{ github.workflow_ref }}" \ + --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ + ghcr.io/bitwarden/self-host:$_RELEASE_TAG + + cosign verify \ + --certificate-identity "${{ github.server_url }}/${{ github.workflow_ref }}" \ + --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ + ghcr.io/bitwarden/self-host:latest - name: Log out of Docker run: docker logout ghcr.io