ci: disable signing config for legacy cosign signatures

This commit is contained in:
Chris Lu
2026-09-03 16:29:19 -07:00
parent 8112f2733a
commit 379e292189
+2 -1
View File
@@ -25,7 +25,8 @@ runs:
set -euo pipefail set -euo pipefail
# The .sig tag layout: the OCI-referrer bundle cosign 3 writes by default # The .sig tag layout: the OCI-referrer bundle cosign 3 writes by default
# is not read by the Kyverno and policy-controller releases in use today. # is not read by the Kyverno and policy-controller releases in use today.
cosign sign --yes --recursive --new-bundle-format=false $IMAGES # Its signing config only supports bundles, so disable that path too.
cosign sign --yes --recursive --new-bundle-format=false --use-signing-config=false $IMAGES
- name: Verify - name: Verify
shell: bash shell: bash