FairwindsOps / pluto

A cli tool to help discover deprecated apiVersions in Kubernetes
https://fairwinds.com
Apache License 2.0
2.14k stars 124 forks source link

fix(release): another attempt to fix the release step #531

Closed transient1 closed 6 months ago

transient1 commented 6 months ago

changing {artifact} in signs cmd to {digest}

This PR fixes #

Checklist

Description

What's the goal of this PR?

Fix the release step which is currently fails with error message

error=signing docker images: failed to publish artifacts: sign: cosign failed: exit status 1: WARNING: Image reference sha256:424fa83f860fe96d1966c0d1cab7c62fc06d36a2e763bad1d8ce004cca306ada uses a tag, not a digest, to identify the image to sign.

and

Error: signing [sha256:424fa83f860fe96d1966c0d1cab7c62fc06d36a2e763bad1d8ce004cca306ada]: accessing entity: GET https://index.docker.io/v2/library/sha256/manifests/424fa83f860fe96d1966c0d1cab7c62fc06d36a2e763bad1d8ce004cca306ada: UNAUTHORIZED: authentication required; [map[Action:pull Class: Name:library/sha256 Type:repository]]
main.go:74: error during command execution: signing [sha256:424fa83f860fe96d1966c0d1cab7c62fc06d36a2e763bad1d8ce004cca306ada]: accessing entity: GET https://index.docker.io/v2/library/sha256/manifests/424fa83f860fe96d1966c0d1cab7c62fc06d36a2e763bad1d8ce004cca306ada: UNAUTHORIZED: authentication required; [map[Action:pull Class: Name:library/sha256 Type:repository]]

What changes did you make?

${artifact} to ${digest} in signs section

What alternative solution should we consider, if any?

fairwinds-insights[bot] commented 6 months ago

Fairwinds Insights Scan Results

View the full report at insights.fairwinds.com.

:white_check_mark: No new Action Items detected!