fix: Switch to using --certificate-identity-regexp for Github Keyless verification

This commit is contained in:
Gerald Pinder 2024-02-19 14:22:26 -05:00
parent b087474cf2
commit 16ffbb343f

View file

@ -688,7 +688,7 @@ fn sign_images(image_name: &str, tag: Option<&str>) -> Result<()> {
if !Command::new("cosign")
.arg("verify")
.arg("--certificate-github-workflow-ref")
.arg("--certificate-identity-regexp")
.arg(&github_worflow_ref)
.arg("--certificate-oidc-issuer")
.arg(GITHUB_TOKEN_ISSUER_URL)