quiet compile. use push output, -y for cosign (#2416)

* quiet compile and compile more. use push digest to sign, -y for cosign
This commit is contained in:
Michel Oosterhof 2024-11-29 23:28:41 +08:00 committed by GitHub
parent 7eb93ff5cf
commit 7667455c0e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 4 additions and 4 deletions

View File

@ -93,8 +93,8 @@ jobs:
- name: Sign the images with GitHub OIDC Token
if: ${{ (github.event_name != 'pull_request') && (github.repository == 'cowrie/cowrie') }}
env:
DIGEST: ${{ steps.build.outputs.digest }}
DIGEST: ${{ steps.push.outputs.digest }}
COSIGN_EXPERIMENTAL: 1
run: |
cosign sign cowrie/cowrie@${DIGEST}
cosign verify cowrie/cowrie@${DIGEST}
cosign sign -y cowrie/cowrie@${DIGEST}
cosign verify cowrie/cowrie@${DIGEST} --certificate-oidc-issuer-regexp '.*' --certificate-identity '.*'

View File

@ -102,7 +102,7 @@ COPY --from=builder --chown=0:0 /etc/group /etc/group
COPY --from=builder --chown=${COWRIE_USER}:${COWRIE_GROUP} ${COWRIE_HOME} ${COWRIE_HOME}
RUN [ "python3", "-m", "compileall", "${COWRIE_HOME}", "/usr/lib/python3.11" ]
RUN [ "python3", "-m", "compileall", "-q", "/cowrie/cowrie-git/src", "/cowrie/cowrie-env/", "/usr/lib/python3.11"]
VOLUME [ "/cowrie/cowrie-git/var", "/cowrie/cowrie-git/etc" ]