Build fails because of missing cosign private key
Was there a change in the github action 6.1.2 that affects the cosign signing secret? My github repo doesn't pick it up anymore after switching to 6.1.2. In the logs the `Run BUILD_OPTS=" tag differs from 6.1.1 to 6.1.2 (see images below)
Solution:Jump to solution
Ok, it works again after merging the dependabot branch into main. It apparently didn't get the secret in a different branch (which is weird, because it's a repository secret?)
4 Replies
See the "highlighted" line with the COSIGN_PRIVATE_KEY not existing after the update
Solution
Ok, it works again after merging the dependabot branch into main. It apparently didn't get the secret in a different branch (which is weird, because it's a repository secret?)
Seems to be some github shenanigans
It probably could have failed if the dependent bot poll request was a fork