diff --git a/.github/workflows/multi-stage-workflow.yml b/.github/workflows/multi-stage-workflow.yml index 7724b01..a30f289 100644 --- a/.github/workflows/multi-stage-workflow.yml +++ b/.github/workflows/multi-stage-workflow.yml @@ -40,7 +40,7 @@ jobs: # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable - name: Sign image with a key run: | - cosign sign --yes --key env://COSIGN_PRIVATE_KEY saurabhkr952/dev-portfolio:${{ github.sha }} + cosign sign --yes --key env://COSIGN_PRIVATE_KEY saurabhkr952/dev-portfolio@@sha256:${{ github.sha }} env: COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }} COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}