You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
docker-publish.yml currently uses a version of build-push-action (docker/build-push-action@ad44023a93711e3deb337508980b4b5e9bcdc5dc) that produces an incorrect digest (docker/build-push-action#569) which results in the inability to verify signed images with cosign.
Updating to a more recent version e.g. docker/build-push-action@v2 appears to resolve the issue.
The text was updated successfully, but these errors were encountered:
docker-publish.yml currently uses a version of
build-push-action
(docker/build-push-action@ad44023a93711e3deb337508980b4b5e9bcdc5dc
) that produces an incorrect digest (docker/build-push-action#569) which results in the inability to verify signed images withcosign
.Updating to a more recent version e.g.
docker/build-push-action@v2
appears to resolve the issue.The text was updated successfully, but these errors were encountered: