Merge pull request #78 from developer-guy/main

fix: add COSIGN_EXPERIMENTAL=1 for verify-blob
stefanprodan · Sep 15, 2022 · 021b9fd · 021b9fd
2 parents d91b9cb + 9ef5436
commit 021b9fd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/docs/install.sh b/docs/install.sh
@@ -169,7 +169,7 @@ verify_checksum_signature() {
   if [[ -x "$(which "cosign")" ]]
   then
     info "Verifying signature with cosign"
-    if cosign verify-blob --key "${COSIGN_PUB_KEY}" --signature "${TMP_HASH}.sig" "${TMP_HASH}" > /dev/null 2>&1; then
+    if COSIGN_EXPERIMENTAL=1 cosign verify-blob --key "${COSIGN_PUB_KEY}" --signature "${TMP_HASH}.sig" "${TMP_HASH}" > /dev/null 2>&1; then
        info "Verified OK"
     else
        fatal "Failed to verify signature"