Fix cosign identity regexp

pull/1563/head
Carl Tashian 9 months ago
parent c1d0a90db5
commit 13db94721a
No known key found for this signature in database

@ -164,11 +164,11 @@ release:
``` ```
cosign verify-blob \ cosign verify-blob \
--certificate ~/Downloads/step-ca_darwin_{{ .Version }}_amd64.tar.gz.sig.pem \ --certificate step-ca_darwin_{{ .Version }}_amd64.tar.gz.sig.pem \
--signature ~/Downloads/step-ca_darwin_{{ .Version }}_amd64.tar.gz.sig \ --signature step-ca_darwin_{{ .Version }}_amd64.tar.gz.sig \
--certificate-identity-regexp "https://github\.com/smallstep/certificates/.*" \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \
~/Downloads/step-ca_darwin_{{ .Version }}_amd64.tar.gz step-ca_darwin_{{ .Version }}_amd64.tar.gz
``` ```
The `checksums.txt` file (in the `Assets` section below) contains a checksum for every artifact in the release. The `checksums.txt` file (in the `Assets` section below) contains a checksum for every artifact in the release.

Loading…
Cancel
Save