Commit 34e96973 authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

fix(sign): support signing multiple images (parallel:matrix) 

The digest is extracted from the image (instead of retrieved from propagated .env)

closes #129
parent 4e1fdcd7

templates/gitlab-ci-docker.yml

+3 −0
Original line number Diff line number Diff line
@@ -1386,6 +1386,9 @@ docker-publish: 
      then

        snapshot_repository=${DOCKER_SNAPSHOT_IMAGE%:*}

        release_repository=${DOCKER_RELEASE_IMAGE%:*}

        # extract snapshot image digest

        # ⚠ don't use upstream $docker_digest due to possible parallel matrix job producing several

        docker_digest=$(skopeo inspect ${TRACE+--debug} --authfile "$BUILDTOOL_HOME/skopeo/.docker/src-config.json" --format='{{ .Digest }}' "docker://$DOCKER_SNAPSHOT_IMAGE")

        tag=$(echo "${docker_digest}" | tr ':' '-')

        log_info "Copying image signature to ${release_repository}:${tag}.sig..."

        skopeo copy ${TRACE+--debug} --src-authfile "$BUILDTOOL_HOME/skopeo/.docker/src-config.json" --dest-authfile "$BUILDTOOL_HOME/skopeo/.docker/dest-config.json" ${DOCKER_PUBLISH_ARGS} "docker://${snapshot_repository}:${tag}.sig" "docker://${release_repository}:${tag}.sig"