diff --git a/.github/workflows/build-docker-image-and-binaries.yaml b/.github/workflows/build-docker-image-and-binaries.yaml index 8a1278bf8..0da86f011 100644 --- a/.github/workflows/build-docker-image-and-binaries.yaml +++ b/.github/workflows/build-docker-image-and-binaries.yaml @@ -208,9 +208,9 @@ jobs: steps: - name: Install Cosign - uses: sigstore/cosign-installer@main + uses: sigstore/cosign-installer@v3.3.0 with: - cosign-release: 'v1.13.1' + cosign-release: 'v2.2.2' - name: Login to DockerHub uses: docker/login-action@v1 @@ -226,7 +226,7 @@ jobs: SEMVER: ${{ github.event.inputs.tag }} - name: Sign the images with GitHub OIDC - run: cosign sign --oidc-issuer https://token.actions.githubusercontent.com ${TAGS} + run: cosign sign -y --oidc-issuer https://token.actions.githubusercontent.com ${TAGS} env: TAGS: axelarnet/axelar-core:${{ github.event.inputs.tag }} COSIGN_EXPERIMENTAL: 1