ci(github-actions): Enable cosign for nightly builds

hedgedoc / container

HedgeDoc container image resources

https://docs.hedgedoc.org/setup/docker/

196 stars 52 forks source link

ci(github-actions): Enable cosign for nightly builds #315

Open SISheogorath opened 2 years ago

SISheogorath commented 2 years ago

This patch adds a first PoC for cosign-signed container images. Cosign helps to authenticate the origin of a container image and is an important step towards supply chain integrity in the container ecosystem.

This patch only introduces this change to nightly builds, in order to evaluate the changes before we utilise them for releases.