From 92504b7864e9095ef7df52c715c1c3d7985bf9c8 Mon Sep 17 00:00:00 2001 From: Ludovic Ortega Date: Sat, 14 Feb 2026 19:17:54 +0100 Subject: [PATCH] ci(release): disable verify attestations for now (#2420) Signed-off-by: Ludovic Ortega --- .github/workflows/release.yml | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index da624c66..c666f875 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -279,17 +279,17 @@ jobs: --certificate-identity "https://github.com/${{ github.workflow_ref }}" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" - - name: Verify attestations - run: | - cosign verify-attestation "ghcr.io/${{ github.repository }}@${{ needs.publish.outputs.image_digest }}" \ - --type cyclonedx \ - --certificate-identity "https://github.com/${{ github.workflow_ref }}" \ - --certificate-oidc-issuer "https://token.actions.githubusercontent.com" > /dev/null + # - name: Verify attestations + # run: | + # cosign verify-attestation "ghcr.io/${{ github.repository }}@${{ needs.publish.outputs.image_digest }}" \ + # --type cyclonedx \ + # --certificate-identity "https://github.com/${{ github.workflow_ref }}" \ + # --certificate-oidc-issuer "https://token.actions.githubusercontent.com" > /dev/null - cosign verify-attestation "${{ env.DOCKER_HUB }}@${{ needs.publish.outputs.image_digest }}" \ - --type cyclonedx \ - --certificate-identity "https://github.com/${{ github.workflow_ref }}" \ - --certificate-oidc-issuer "https://token.actions.githubusercontent.com" > /dev/null + # cosign verify-attestation "${{ env.DOCKER_HUB }}@${{ needs.publish.outputs.image_digest }}" \ + # --type cyclonedx \ + # --certificate-identity "https://github.com/${{ github.workflow_ref }}" \ + # --certificate-oidc-issuer "https://token.actions.githubusercontent.com" > /dev/null publish-release: name: Publish release