From 8df05beb1495865f2708a3feac0e528fb188b775 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lu=C3=ADs=20Ventuzelos?=
 <207163323+cx-luis-ventuzelos@users.noreply.github.com>
Date: Tue, 9 Jun 2026 17:03:16 +0100
Subject: [PATCH] Comment out Docker image signature verification step in
 release workflow

---
 .github/workflows/release.yml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7bb8b4c5..91b41c26 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -138,13 +138,13 @@ jobs:
         run: |
           cosign sign --yes --key env://COSIGN_PRIVATE_KEY checkmarx/ast-cli:${{ inputs.tag }}
 
-      - name: Verify Docker image signature
-        if: inputs.dev == false
-        run: |
-          echo "${{ secrets.COSIGN_PUBLIC_KEY }}" > cosign.pub
-          cosign verify --key cosign.pub checkmarx/ast-cli:${{ inputs.tag }}
-        env:
-          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
+      #- name: Verify Docker image signature
+      #  if: inputs.dev == false
+      #  run: |
+      #    echo "${{ secrets.COSIGN_PUBLIC_KEY }}" > cosign.pub
+      #    cosign verify --key cosign.pub checkmarx/ast-cli:${{ inputs.tag }}
+      #  env:
+      #    COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
 
       - name: Create GitHub Release
         env: