Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docker/build-push-action needs to be updated in docker-publish.yml #1519

Closed
bradbeck opened this issue Apr 8, 2022 · 1 comment · Fixed by #1529
Closed

docker/build-push-action needs to be updated in docker-publish.yml #1519

bradbeck opened this issue Apr 8, 2022 · 1 comment · Fixed by #1529

Comments

@bradbeck
Copy link

bradbeck commented Apr 8, 2022

docker-publish.yml currently uses a version of build-push-action (docker/build-push-action@ad44023a93711e3deb337508980b4b5e9bcdc5dc) that produces an incorrect digest (docker/build-push-action#569) which results in the inability to verify signed images with cosign.

Updating to a more recent version e.g. docker/build-push-action@v2 appears to resolve the issue.

@Phantsure
Copy link
Contributor

Thank you for bringing this here. I hope someone can raise a PR for same.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants