From 379e292189580d564f516e0288b53c43033005fb Mon Sep 17 00:00:00 2001 From: Chris Lu Date: Thu, 3 Sep 2026 16:29:19 -0700 Subject: [PATCH] ci: disable signing config for legacy cosign signatures --- .github/actions/sign-image/action.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/actions/sign-image/action.yml b/.github/actions/sign-image/action.yml index 405b13b3f..4ba576270 100644 --- a/.github/actions/sign-image/action.yml +++ b/.github/actions/sign-image/action.yml @@ -25,7 +25,8 @@ runs: set -euo pipefail # The .sig tag layout: the OCI-referrer bundle cosign 3 writes by default # is not read by the Kyverno and policy-controller releases in use today. - cosign sign --yes --recursive --new-bundle-format=false $IMAGES + # Its signing config only supports bundles, so disable that path too. + cosign sign --yes --recursive --new-bundle-format=false --use-signing-config=false $IMAGES - name: Verify shell: bash