starred/windmill
1
0
Fork 0
mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-23 00:03:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

unbreak windows worker build and retry cosign signing (#11926)

Browse Source 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Ruben Fiszel
2026-10-21 19:24:29 +02:00
committed by GitHub
co-authored by Claude Opus 5.5
parent 892334f008
commit 037355ddec
2 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/actions/sign-attest-image/action.yml
+9 -1
View File
@@ -46,7 +46,15 @@ runs:
env:
IMAGE: ${{ inputs.image }}
DIGEST: ${{ inputs.digest }}
run: cosign sign --yes --recursive "${IMAGE}@${DIGEST}"
# Fulcio and Rekor return transient 5xx often enough to fail a release;
# re-signing the same digest only adds a signature, so retrying is safe.
run: |
for attempt in 1 2 3 4 5; do
cosign sign --yes --recursive "${IMAGE}@${DIGEST}" && exit 0
echo "::warning::cosign sign failed (attempt $attempt/5)"
[ "$attempt" -lt 5 ] && sleep $((attempt * 30))
done
exit 1
- name: SLSA provenance (GitHub artifact attestation)
uses: actions/attest-build-provenance@v4