diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index da624c66..c666f875 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -279,17 +279,17 @@ jobs: --certificate-identity "https://github.com/${{ github.workflow_ref }}" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" - - name: Verify attestations - run: | - cosign verify-attestation "ghcr.io/${{ github.repository }}@${{ needs.publish.outputs.image_digest }}" \ - --type cyclonedx \ - --certificate-identity "https://github.com/${{ github.workflow_ref }}" \ - --certificate-oidc-issuer "https://token.actions.githubusercontent.com" > /dev/null + # - name: Verify attestations + # run: | + # cosign verify-attestation "ghcr.io/${{ github.repository }}@${{ needs.publish.outputs.image_digest }}" \ + # --type cyclonedx \ + # --certificate-identity "https://github.com/${{ github.workflow_ref }}" \ + # --certificate-oidc-issuer "https://token.actions.githubusercontent.com" > /dev/null - cosign verify-attestation "${{ env.DOCKER_HUB }}@${{ needs.publish.outputs.image_digest }}" \ - --type cyclonedx \ - --certificate-identity "https://github.com/${{ github.workflow_ref }}" \ - --certificate-oidc-issuer "https://token.actions.githubusercontent.com" > /dev/null + # cosign verify-attestation "${{ env.DOCKER_HUB }}@${{ needs.publish.outputs.image_digest }}" \ + # --type cyclonedx \ + # --certificate-identity "https://github.com/${{ github.workflow_ref }}" \ + # --certificate-oidc-issuer "https://token.actions.githubusercontent.com" > /dev/null publish-release: name: Publish release