diff --git a/.github/workflows/publishimage.yml b/.github/workflows/publishimage.yml index 3bcd3ffcb404..59129e5daf0f 100644 --- a/.github/workflows/publishimage.yml +++ b/.github/workflows/publishimage.yml @@ -20,9 +20,13 @@ permissions: packages: write on: + pull_request: + branches: + - main push: branches: - main + worflow_dispatch: env: GO_VERSION: 1.17.7 @@ -59,7 +63,7 @@ jobs: make install make scorecard-ko - name: Install Cosign - uses: sigstore/cosign-installer@f700e6fbbab82f6897758a3af7a8dede4e308656 # v1.2.1 + uses: sigstore/cosign-installer@f700e6fbbab82f6897758a3af7a8dede4e308656 - name: Sign image - run: | - cosign sign ghcr.io/${{github.repository_owner}}/stunning-tribble:${{ github.sha }} + run: | + cosign sign ghcr.io/${{github.repository_owner}}/scorecard:${{ github.sha }}