diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7bb8b4c5..91b41c26 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -138,13 +138,13 @@ jobs: run: | cosign sign --yes --key env://COSIGN_PRIVATE_KEY checkmarx/ast-cli:${{ inputs.tag }} - - name: Verify Docker image signature - if: inputs.dev == false - run: | - echo "${{ secrets.COSIGN_PUBLIC_KEY }}" > cosign.pub - cosign verify --key cosign.pub checkmarx/ast-cli:${{ inputs.tag }} - env: - COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }} + #- name: Verify Docker image signature + # if: inputs.dev == false + # run: | + # echo "${{ secrets.COSIGN_PUBLIC_KEY }}" > cosign.pub + # cosign verify --key cosign.pub checkmarx/ast-cli:${{ inputs.tag }} + # env: + # COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }} - name: Create GitHub Release env: