fix: login to GHCR before signing image

ublue-os · Feb 3, 2025 · d97fe0a · d97fe0a
1 parent 735e0b1
commit d97fe0a
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/workflows/reusable-build-image.yml b/.github/workflows/reusable-build-image.yml
@@ -366,7 +366,16 @@ jobs:
     needs: manifest
     if: github.event_name != 'pull_request'
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
     steps:
+      - name: Login to GHCR
+        run: |
+          echo ${{ secrets.GITHUB_TOKEN }} | docker login -u ${{ github.actor }} --password-stdin ghcr.io
+          echo ${{ secrets.GITHUB_TOKEN }} | podman login -u ${{ github.actor }} --password-stdin ghcr.io
+
       - name: Install Cosign
         uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0