From 589b4a2572dbc913e4481c290f9ebc35ba01772f Mon Sep 17 00:00:00 2001
From: cpanato <ctadeu@gmail.com>
Date: Fri, 17 Jun 2022 10:04:45 +0200
Subject: [PATCH] update readme

Signed-off-by: cpanato <ctadeu@gmail.com>
---
 README.md | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index 5239a72..4099359 100644
--- a/README.md
+++ b/README.md
@@ -128,18 +128,17 @@ jobs:
 
       - name: Sign image with a key
         run: |
-          echo ${COSIGN_KEY} > /tmp/my_cosign.key && \
-          cosign sign --key /tmp/my_cosign.key ${TAGS}
+          cosign sign --key env://COSIGN_PRIVATE_KEY ${TAGS}
         env:
           TAGS: ${{ steps.docker_meta.outputs.tags }}
-          COSIGN_KEY: ${{secrets.COSIGN_KEY}}
+          COSIGN_PRIVATE_KEY: ${{secrets.COSIGN_PRIVATE_KEY}}
           COSIGN_PASSWORD: ${{secrets.COSIGN_PASSWORD}}
 
       - name: Sign the images with GitHub OIDC Token **not production ready**
         run: cosign sign ${TAGS}
         env:
           TAGS: ${{ steps.docker_meta.outputs.tags }}
-          COSIGN_EXPERIMENTAL: 1
+          COSIGN_EXPERIMENTAL: true
 ```
 
 ### Optional Inputs