|
|
|
|
@ -317,17 +317,12 @@ jobs:
@@ -317,17 +317,12 @@ jobs:
|
|
|
|
|
DOCKER_PASSWORD: ${{ steps.retrieve-secrets.outputs.docker-password }} |
|
|
|
|
run: echo "$DOCKER_PASSWORD" | docker login -u "$DOCKER_USERNAME" --password-stdin |
|
|
|
|
|
|
|
|
|
- name: Setup Docker Trust |
|
|
|
|
- name: Setup Docker Content Trust (DCT) |
|
|
|
|
if: ${{ env.is_publish_branch == 'true' }} |
|
|
|
|
env: |
|
|
|
|
DCT_DELEGATION_KEY_ID: "c9bde8ec820701516491e5e03d3a6354e7bd66d05fa3df2b0062f68b116dc59c" |
|
|
|
|
DCT_DELEGATE_KEY: ${{ steps.retrieve-secrets.outputs.dct-delegate-2-key }} |
|
|
|
|
DCT_REPO_PASSPHRASE: ${{ steps.retrieve-secrets.outputs.dct-delegate-2-repo-passphrase }} |
|
|
|
|
run: | |
|
|
|
|
mkdir -p ~/.docker/trust/private |
|
|
|
|
echo "$DCT_DELEGATE_KEY" > ~/.docker/trust/private/$DCT_DELEGATION_KEY_ID.key |
|
|
|
|
echo "DOCKER_CONTENT_TRUST=1" >> $GITHUB_ENV |
|
|
|
|
echo "DOCKER_CONTENT_TRUST_REPOSITORY_PASSPHRASE=$DCT_REPO_PASSPHRASE" >> $GITHUB_ENV |
|
|
|
|
uses: bitwarden/gh-actions/setup-docker-trust@f955298c7a982b3fb5dbb73afd582c584fd5beec |
|
|
|
|
with: |
|
|
|
|
azure-creds: ${{ secrets.AZURE_KV_CI_SERVICE_PRINCIPAL }} |
|
|
|
|
azure-keyvault-name: "bitwarden-ci" |
|
|
|
|
|
|
|
|
|
########## Generate image tag and build Docker image ########## |
|
|
|
|
- name: Generate Docker image tag |
|
|
|
|
|