fix: remove registry-1.docker.io prefix

snyk · Nov 20, 2024 · eabee07 · eabee07
1 parent ff030a1
commit eabee07
Showing 1 changed file with 8 additions and 3 deletions.
diff --git a/.github/workflows/sigstore.yml b/.github/workflows/sigstore.yml
@@ -15,6 +15,11 @@ jobs:
         uses: actions/checkout@main
         with:
           fetch-depth: 0
+      - name: Login to DockerHub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ secrets.DOCKERHUB_USER }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
       - name: Install Cosign
         uses: sigstore/[email protected]
       - name: Check Cosign
@@ -26,8 +31,8 @@ jobs:
           # Obtain the digest from this tag
           DIGEST=$(curl "https://hub.docker.com/v2/repositories/snyk/snyk-universal-broker/tags/${LATEST_TAG}" | jq '.digest' -r)
           # Sign the image, using GitHub as an OIDC provider
-          cosign sign --yes oci://registry-1.docker.io/snyk/snyk-universal-broker-helm@${DIGEST}
+          cosign sign --yes snyk/snyk-universal-broker-helm@${DIGEST}
       - name: Verify signature
         run: |
-          cosign verify oci://registry-1.docker.io/snyk/snyk-universal-broker-helm@${DIGEST}
-          cosign verify oci://registry-1.docker.io/snyk/snyk-universal-broker-helm@${LATEST_TAG}
+          cosign verify snyk/snyk-universal-broker-helm@${DIGEST}
+          cosign verify snyk/snyk-universal-broker-helm@${LATEST_TAG}