Fix signing for the cosigned image. (#634)

Signed-off-by: Dan Lorenc <[email protected]>

Author: dlorenc

.github/workflows/build.yaml

@@ -50,3 +50,5 @@ jobs:
         run: gcloud auth configure-docker --quiet
       - name: container
         run: echo -n "${{secrets.COSIGN_PASSWORD}}" | KO_PREFIX=gcr.io/projectsigstore/cosign/ci make sign-container
+      - name: cosigned
+        run: echo -n "${{secrets.COSIGN_PASSWORD}}" | KO_PREFIX=gcr.io/projectsigstore/cosign/ci make sign-cosigned

Makefile

@@ -102,6 +102,9 @@ ko-local:
 .PHONY: sign-container
 sign-container: ko
 	cosign sign -key .github/workflows/cosign.key -a GIT_HASH=$(GIT_HASH) ${KO_PREFIX}/cosign:$(GIT_HASH)
+
+.PHONY: sign-cosigned
+sign-cosigned:
 	cosign sign -key .github/workflows/cosign.key -a GIT_HASH=$(GIT_HASH) ${KO_PREFIX}/cosigned:$(GIT_HASH)
 
 # used when releasing together with GCP CloudBuild