message: chore(docker): use cosign to sign the container images
diff: @@ -12,6 +12,8 @@ jobs:
  build-push:
  permissions:
  packages: write
  + id-token: write
  +
  runs-on: ubuntu-latest
  steps:
  - uses: actions/checkout@v2
  @@ -77,6 +79,13 @@ jobs:
  tags: ${{ steps.docker_meta.outputs.tags }}
  labels: ${{ steps.docker_meta.outputs.labels }}
  + - uses: sigstore/cosign-installer@v1.2.1
  +
  + - name: Sign the images
  + run: cosign sign ${{ steps.docker_meta.outputs.tags }}
  + env:
  + COSIGN_EXPERIMENTAL: 1
  +
  - name: Move cache
  run: |
  rm -rf /tmp/.buildx-cache
  