From b6400165aadbed17e417d99bf3f37c2b6aa54131 Mon Sep 17 00:00:00 2001 From: Brian DeHamer Date: Thu, 29 Feb 2024 16:29:00 -0800 Subject: [PATCH] Force signing w/ private sigstore instance (#16) Signed-off-by: Brian DeHamer --- .github/workflows/ci.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1ff0c9d..50a3b0c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -59,6 +59,8 @@ jobs: - name: Run attest-provenance id: attest-provenance uses: ./ + env: + INPUT_PRIVATE-SIGNING: 'true' with: subject-digest: 'sha256:7d070f6b64d9bcc530fe99cc21eaaa4b3c364e0b2d367d7735671fa202a03b32' subject-name: 'subject'