particle-os/particle-os-cli
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: use ghcr for cosign (#304)

Browse source 
Co-authored-by: Gerald Pinder <gmpinder@gmail.com>
This commit is contained in:
RoyalOughtness 2024-12-21 16:09:50 -08:00 • committed by GitHub
parent 000fc9a250
commit 4d18e7e1d4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Earthfile
View file

@ -241,7 +241,7 @@ installer:
SAVE ARTIFACT /out/bluebuild SAVE ARTIFACT /out/bluebuild
cosign: cosign:
FROM gcr.io/projectsigstore/cosign FROM ghcr.io/sigstore/cosign/cosign:v2.4.1
SAVE ARTIFACT /ko-app/cosign SAVE ARTIFACT /ko-app/cosign
digest: digest:

2
template/templates/stages.j2
View file

@ -24,7 +24,7 @@ COPY ./modules /modules
# stage process so that adding the bins into the image # stage process so that adding the bins into the image
# can be added to the ostree commits. # can be added to the ostree commits.
FROM scratch AS stage-bins FROM scratch AS stage-bins
COPY --from=gcr.io/projectsigstore/cosign /ko-app/cosign /bins/cosign COPY --from={{ blue_build_utils::constants::COSIGN_IMAGE }} /ko-app/cosign /bins/cosign
COPY --from=ghcr.io/blue-build/cli: COPY --from=ghcr.io/blue-build/cli:
{%- if let Some(tag) = recipe.blue_build_tag -%} {%- if let Some(tag) = recipe.blue_build_tag -%}
{{ tag }} {{ tag }}

2
utils/src/constants.rs
View file

@ -74,7 +74,7 @@ pub const XDG_RUNTIME_DIR: &str = "XDG_RUNTIME_DIR";
// Misc // Misc
pub const BUILD_SCRIPTS_IMAGE_REF: &str = "ghcr.io/blue-build/cli/build-scripts"; pub const BUILD_SCRIPTS_IMAGE_REF: &str = "ghcr.io/blue-build/cli/build-scripts";
pub const COSIGN_IMAGE: &str = "ghcr.io/sigstore/cosign/cosign:latest"; pub const COSIGN_IMAGE: &str = "ghcr.io/sigstore/cosign/cosign:v2.4.1";
pub const OCI_ARCHIVE: &str = "oci-archive"; pub const OCI_ARCHIVE: &str = "oci-archive";
pub const OSTREE_IMAGE_SIGNED: &str = "ostree-image-signed"; pub const OSTREE_IMAGE_SIGNED: &str = "ostree-image-signed";
pub const OSTREE_UNVERIFIED_IMAGE: &str = "ostree-unverified-image"; pub const OSTREE_UNVERIFIED_IMAGE: &str = "ostree-unverified-image";