Skip to content

Commit f708d39

Browse files
cpanatocpanato
authored
fix indentation and cosign verify command (#2706)
Signed-off-by: cpanato <[email protected]>
1 parent 01bd21d commit f708d39

File tree

1 file changed

+79
-75
lines changed

1 file changed

+79
-75
lines changed

‎release/cloudbuild.yaml‎

Lines changed: 79 additions & 75 deletions
Original file line numberDiff line numberDiff line change
@@ -16,98 +16,102 @@
1616
timeout: 3600s
1717

1818
steps:
19-
- name: gcr.io/cloud-builders/git
20-
dir: "go/src/sigstore"
21-
args:
22-
- "clone"
23-
- "https://github.com/${_TOOL_ORG}/${_TOOL_REPO}"
19+
- name: gcr.io/cloud-builders/git
20+
dir: "go/src/sigstore"
21+
args:
22+
- "clone"
23+
- "https://github.com/${_TOOL_ORG}/${_TOOL_REPO}"
2424

25-
- name: gcr.io/cloud-builders/git
26-
entrypoint: "bash"
27-
dir: "go/src/sigstore/cosign"
28-
args:
29-
- '-c'
30-
- |
31-
git fetch
32-
echo "Checking out ${_GIT_TAG}"
33-
git checkout ${_GIT_TAG}
25+
- name: gcr.io/cloud-builders/git
26+
entrypoint: "bash"
27+
dir: "go/src/sigstore/cosign"
28+
args:
29+
- '-c'
30+
- |
31+
git fetch
32+
echo "Checking out ${_GIT_TAG}"
33+
git checkout ${_GIT_TAG}
3434
35-
- name: 'gcr.io/projectsigstore/cosign:v2.0.0-rc.1@sha256:12d365ed4ee9bb32ba8a0fd16f6c5eae5229dc50e8d62460312cca0b5b7e0457'
36-
dir: "go/src/sigstore/cosign"
37-
env:
38-
- TUF_ROOT=/tmp
39-
args:
40-
- 'verify'
41-
- 'ghcr.io/gythialy/golang-cross:v1.20.0-0@sha256:d50b48a7cf2b90f70e35da6d7419b7b16ed29a10f3175a2c849ef2956d485aae'
35+
- name: 'gcr.io/projectsigstore/cosign:v2.0.0-rc.1@sha256:12d365ed4ee9bb32ba8a0fd16f6c5eae5229dc50e8d62460312cca0b5b7e0457'
36+
dir: "go/src/sigstore/cosign"
37+
env:
38+
- TUF_ROOT=/tmp
39+
args:
40+
- 'verify'
41+
- 'ghcr.io/gythialy/golang-cross:v1.20.0-0@sha256:d50b48a7cf2b90f70e35da6d7419b7b16ed29a10f3175a2c849ef2956d485aae'
42+
- '--certificate-oidc-issuer'
43+
- "https://token.actions.githubusercontent.com"
44+
- '--certificate-identity'
45+
- "https://github.com/gythialy/golang-cross/.github/workflows/release-golang-cross.yml@refs/tags/v1.20.0-0"
4246

43-
# maybe we can build our own image and use that to be more in a safe side
44-
- name: ghcr.io/gythialy/golang-cross:v1.20.0-0@sha256:d50b48a7cf2b90f70e35da6d7419b7b16ed29a10f3175a2c849ef2956d485aae
45-
entrypoint: /bin/sh
46-
dir: "go/src/sigstore/cosign"
47-
env:
48-
- "GOPATH=/workspace/go"
49-
- "GOBIN=/workspace/bin"
50-
- PROJECT_ID=${PROJECT_ID}
51-
- KEY_LOCATION=${_KEY_LOCATION}
52-
- KEY_RING=${_KEY_RING}
53-
- KEY_NAME=${_KEY_NAME}
54-
- KEY_VERSION=${_KEY_VERSION}
55-
- GIT_TAG=${_GIT_TAG}
56-
- GOOGLE_SERVICE_ACCOUNT_NAME=keyless@${PROJECT_ID}.iam.gserviceaccount.com
57-
- COSIGN_YES=true
58-
- KO_PREFIX=gcr.io/${PROJECT_ID}
59-
secretEnv:
60-
- GITHUB_TOKEN
61-
args:
62-
- '-c'
63-
- |
64-
gcloud auth configure-docker \
65-
&& make release
47+
# maybe we can build our own image and use that to be more in a safe side
48+
- name: ghcr.io/gythialy/golang-cross:v1.20.0-0@sha256:d50b48a7cf2b90f70e35da6d7419b7b16ed29a10f3175a2c849ef2956d485aae
49+
entrypoint: /bin/sh
50+
dir: "go/src/sigstore/cosign"
51+
env:
52+
- "GOPATH=/workspace/go"
53+
- "GOBIN=/workspace/bin"
54+
- PROJECT_ID=${PROJECT_ID}
55+
- KEY_LOCATION=${_KEY_LOCATION}
56+
- KEY_RING=${_KEY_RING}
57+
- KEY_NAME=${_KEY_NAME}
58+
- KEY_VERSION=${_KEY_VERSION}
59+
- GIT_TAG=${_GIT_TAG}
60+
- GOOGLE_SERVICE_ACCOUNT_NAME=keyless@${PROJECT_ID}.iam.gserviceaccount.com
61+
- COSIGN_YES=true
62+
- KO_PREFIX=gcr.io/${PROJECT_ID}
63+
secretEnv:
64+
- GITHUB_TOKEN
65+
args:
66+
- '-c'
67+
- |
68+
gcloud auth configure-docker \
69+
&& make release
6670
67-
- name: ghcr.io/gythialy/golang-cross:v1.20.0-0@sha256:d50b48a7cf2b90f70e35da6d7419b7b16ed29a10f3175a2c849ef2956d485aae
68-
entrypoint: 'bash'
69-
dir: "go/src/sigstore/cosign"
70-
env:
71-
- "GOPATH=/workspace/go"
72-
- "GOBIN=/workspace/bin"
73-
- PROJECT_ID=${PROJECT_ID}
74-
- KEY_LOCATION=${_KEY_LOCATION}
75-
- KEY_RING=${_KEY_RING}
76-
- KEY_NAME=${_KEY_NAME}
77-
- KEY_VERSION=${_KEY_VERSION}
78-
- GIT_TAG=${_GIT_TAG}
79-
- KO_PREFIX=gcr.io/${PROJECT_ID}
80-
- COSIGN_YES=true
81-
- GOOGLE_SERVICE_ACCOUNT_NAME=keyless@${PROJECT_ID}.iam.gserviceaccount.com
82-
- GITHUB_USER=${_GITHUB_USER}
83-
secretEnv:
84-
- GITHUB_TOKEN
85-
args:
86-
- '-c'
87-
- |
88-
echo $$GITHUB_TOKEN | docker login ghcr.io -u $$GITHUB_USER --password-stdin \
89-
&& make copy-signed-release-to-ghcr || true
71+
- name: ghcr.io/gythialy/golang-cross:v1.20.0-0@sha256:d50b48a7cf2b90f70e35da6d7419b7b16ed29a10f3175a2c849ef2956d485aae
72+
entrypoint: 'bash'
73+
dir: "go/src/sigstore/cosign"
74+
env:
75+
- "GOPATH=/workspace/go"
76+
- "GOBIN=/workspace/bin"
77+
- PROJECT_ID=${PROJECT_ID}
78+
- KEY_LOCATION=${_KEY_LOCATION}
79+
- KEY_RING=${_KEY_RING}
80+
- KEY_NAME=${_KEY_NAME}
81+
- KEY_VERSION=${_KEY_VERSION}
82+
- GIT_TAG=${_GIT_TAG}
83+
- KO_PREFIX=gcr.io/${PROJECT_ID}
84+
- COSIGN_YES=true
85+
- GOOGLE_SERVICE_ACCOUNT_NAME=keyless@${PROJECT_ID}.iam.gserviceaccount.com
86+
- GITHUB_USER=${_GITHUB_USER}
87+
secretEnv:
88+
- GITHUB_TOKEN
89+
args:
90+
- '-c'
91+
- |
92+
echo $$GITHUB_TOKEN | docker login ghcr.io -u $$GITHUB_USER --password-stdin \
93+
&& make copy-signed-release-to-ghcr || true
9094
9195
availableSecrets:
9296
secretManager:
93-
- versionName: projects/${PROJECT_NUMBER}/secrets/GITHUB_TOKEN/versions/latest
94-
env: GITHUB_TOKEN
97+
- versionName: projects/${PROJECT_NUMBER}/secrets/GITHUB_TOKEN/versions/latest
98+
env: GITHUB_TOKEN
9599

96100
artifacts:
97101
objects:
98102
location: 'gs://${_STORAGE_LOCATION}/${_GIT_TAG}'
99103
paths:
100-
- "go/src/sigstore/cosign/dist/*"
101-
- "go/src/sigstore/cosign/release/release-cosign.pub"
104+
- "go/src/sigstore/cosign/dist/*"
105+
- "go/src/sigstore/cosign/release/release-cosign.pub"
102106

103107
options:
104108
machineType: E2_HIGHCPU_32
105109

106110
tags:
107-
- cosign-release
108-
- ${_GIT_TAG}
109-
- ${_TOOL_ORG}
110-
- ${_TOOL_REPO}
111+
- cosign-release
112+
- ${_GIT_TAG}
113+
- ${_TOOL_ORG}
114+
- ${_TOOL_REPO}
111115

112116
substitutions:
113117
_GIT_TAG: 'v1.23.45'

0 commit comments

Comments
 (0)