GitHub Action: only sign non-pull-reguest images

bwbohl · Feb 13, 2025 · e88c640 · e88c640
1 parent 391f544
commit e88c640
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
@@ -127,6 +127,7 @@ jobs:
         # against the sigstore community Fulcio instance.
       #  run: cosign sign ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build-and-push.outputs.digest }}
       - name: Sign the images with GitHub OIDC Token
+        if: ${{ github.event_name != 'pull_request' }}
         env:
           DIGEST: ${{ steps.build-and-push.outputs.digest }}
           TAGS: ${{ steps.meta.outputs.tags }}