diff --git a/.github/workflows/ecs-deployment.yml b/.github/workflows/ecs-deployment.yml index f46709caf8..3afb7f501b 100644 --- a/.github/workflows/ecs-deployment.yml +++ b/.github/workflows/ecs-deployment.yml @@ -91,15 +91,6 @@ jobs: ENCRYPTION_KEY=${{ env.ENCRYPTION_KEY }} NEXT_PUBLIC_SENTRY_DSN=${{ env.NEXT_PUBLIC_SENTRY_DSN }} - - name: Sign the published Docker image - env: - # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable - TAGS: ${{ steps.meta.outputs.tags }} - DIGEST: ${{ steps.build-and-push.outputs.digest }} - # This step uses the identity token to provision an ephemeral certificate - # against the sigstore community Fulcio instance. - run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}${DIGEST} - deploy: needs: build runs-on: ubuntu-latest