···

       
22
       
22
       
 
       
      contents: read

     

       
23
       
23
       
 
       
      packages: write

     

       
24
       
24
       
 
       
      id-token: write

     

       
25
       
25
       
+
       


     

       
25
       
26
       
 
       
    steps:

     

       
26
       
27
       
 
       
      - name: Checkout repository

     

       
27
       
28
       
 
       
        uses: actions/checkout@v3

     

       
28
       
29
       
 
       


     

       
29
       
29
       
-
       
      -

     

       
30
       
30
       
-
       
        name: Set up QEMU

     

       
31
       
31
       
-
       
        uses: docker/setup-qemu-action@v3

     

       
30
       
30
       
+
       
      - name: Install cosign

     

       
31
       
31
       
+
       
        if: github.event_name != 'pull_request'

     

       
32
       
32
       
+
       
        uses: sigstore/cosign-installer@v3.8.1

     

       
33
       
33
       
+
       
        with:

     

       
34
       
34
       
+
       
          cosign-release: "v2.4.3"

     

       
32
       
35
       
 
       


     

       
33
       
36
       
 
       
      - name: Setup Docker buildx

     

       
34
       
37
       
 
       
        uses: docker/setup-buildx-action@v3