ext/new-api
2
0
Fork 0
mirror of https://github.com/QuantumNous/new-api.git synced 2026-09-11 14:41:21 +00:00
Code Activity

feat(docker): add cosign for signing manifests and update permissions

Browse Source
This commit is contained in:
CaIon
2026-07-07 20:08:27 +08:00
parent 3fbad6a72f
commit 8bc4bf1d6b
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/docker-build.yml
+11
View File
@@ -109,6 +109,9 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
if: startsWith(github.ref, 'refs/tags/') || github.event_name == 'workflow_dispatch' if: startsWith(github.ref, 'refs/tags/') || github.event_name == 'workflow_dispatch'
permissions:
id-token: write
steps: steps:
- name: Set version - name: Set version
run: echo "TAG=${{ needs.build_single_arch.outputs.tag }}" >> $GITHUB_ENV run: echo "TAG=${{ needs.build_single_arch.outputs.tag }}" >> $GITHUB_ENV
@@ -133,6 +136,14 @@ jobs:
calciumion/new-api:latest-amd64 \ calciumion/new-api:latest-amd64 \
calciumion/new-api:latest-arm64 calciumion/new-api:latest-arm64
- name: Install cosign
uses: sigstore/cosign-installer@v3
- name: Sign manifests with cosign
run: |
cosign sign --yes calciumion/new-api:${TAG}
cosign sign --yes calciumion/new-api:latest
- name: Manifest summary - name: Manifest summary
run: | run: |
echo "### Multi-arch Manifest" >> $GITHUB_STEP_SUMMARY echo "### Multi-arch Manifest" >> $GITHUB_STEP_SUMMARY