Remove cosign verify

pgschk · Nov 20, 2024 · 8d00d4d · 8d00d4d
1 parent c8e3a76
commit 8d00d4d
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 13 deletions.
diff --git a/.github/workflows/publish-container.yml b/.github/workflows/publish-container.yml
@@ -166,20 +166,8 @@ jobs:
           DIGEST: ${{ needs.build.outputs.digest }}
           COSIGN_EXPERIMENTAL: 1
 
-      - name: Verify image
-        run: cosign verify --certificate-identity "https://github.com/pgschk/alpine-toolkit/.github/workflows/publish-container.yml@refs/heads/main" --certificate-oidc-issuer="https://token.actions.githubusercontent.com" ghcr.io/pgschk/alpine-toolkit@${DIGEST} docker.io/pgschk/alpine-toolkit@${DIGEST}
-        env:
-          DIGEST: ${{ needs.build.outputs.digest }}
-          COSIGN_EXPERIMENTAL: 1
-
       - name: Sign extended image
         run: cosign sign --yes ghcr.io/pgschk/alpine-toolkit@${DIGEST} docker.io/pgschk/alpine-toolkit@${DIGEST}
         env:
           DIGEST: ${{ needs.build.outputs.digest-extended }}
           COSIGN_EXPERIMENTAL: 1
-
-      - name: Verify pushed extended image
-        run: cosign verify --certificate-identity "https://github.com/pgschk/alpine-toolkit/.github/workflows/publish-container.yml@refs/heads/main" --certificate-oidc-issuer="https://token.actions.githubusercontent.com" ghcr.io/pgschk/alpine-toolkit@${DIGEST} docker.io/pgschk/alpine-toolkit@${DIGEST}
-        env:
-          DIGEST: ${{ needs.build.outputs.digest-extended }}
-          COSIGN_EXPERIMENTAL: 1
diff --git a/README.md b/README.md
@@ -1,6 +1,5 @@
 [![Container CI](https://github.com/pgschk/alpine-toolkit/actions/workflows/publish-container.yml/badge.svg)](https://github.com/pgschk/alpine-toolkit/actions/workflows/publish-container.yml)
 ![GitHub release (with filter)](https://img.shields.io/github/v/release/pgschk/alpine-toolkit)
-[![Daily Vulnerability Scan](https://github.com/pgschk/alpine-toolkit/actions/workflows/trivy-schedule.yml/badge.svg)](https://github.com/pgschk/alpine-toolkit/actions/workflows/trivy-schedule.yml)
 
 # Alpine Toolkit