diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 76fa040..d3113fb 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -133,10 +133,19 @@ jobs: echo "BASE_IMAGE_NAME=$(echo $BASE_IMAGE | sed 's/.*\/.*\///')" >> $GITHUB_ENV - name: Verify base image + if: ${{ ! contains(IMAGE_NAME, 'wayblue') }} uses: EyeCantCU/cosign-action/verify@v0.2.1 with: containers: ${{ env.BASE_IMAGE_NAME }}:${{ env.IMAGE_MAJOR_VERSION }} + - name: Verify base image + if: ${{ contains(IMAGE_NAME, 'wayblue') }} + uses: EyeCantCU/cosign-action/verify@v0.2.1 + with: + containers: ${{ env.BASE_IMAGE_NAME }}:${{ env.IMAGE_MAJOR_VERSION }} + registry: 'ghcr.io/wayblueorg' + pubkey: 'https://raw.githubusercontent.com/wayblueorg/wayblue/live/cosign.pub' + - name: Get current version id: labels run: |