From 83fc43cc52489fe358848cff8c0e219869b3fd81 Mon Sep 17 00:00:00 2001
From: Max <shadow.iqka@qq.com>
Date: Fri, 29 Nov 2024 15:27:03 +0800
Subject: [PATCH] Enable Docker Content Trust for all build jobs in workflow
 files

---
 .github/workflows/build-docker-internal.yml | 5 ++++-
 .github/workflows/build-docker.yml          | 9 ++++++++-
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build-docker-internal.yml b/.github/workflows/build-docker-internal.yml
index bf20a9a1..46b9991a 100644
--- a/.github/workflows/build-docker-internal.yml
+++ b/.github/workflows/build-docker-internal.yml
@@ -12,7 +12,6 @@ on:
 
 env:
   VERSION: 0.10.4
-  DOCKER_CONTENT_TRUST: 1
 jobs:
   build:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
@@ -45,6 +44,8 @@ jobs:
       - name: Build Production
         timeout-minutes: 60
         uses: docker/build-push-action@v6
+        env:
+          DOCKER_CONTENT_TRUST: 1
         with:
           context: ./docker/production
           platforms: linux/amd64
@@ -57,6 +58,8 @@ jobs:
       - name: Build Production Arm64
         timeout-minutes: 60
         uses: docker/build-push-action@v6
+        env:
+          DOCKER_CONTENT_TRUST: 1
         with:
           context: ./docker/production
           platforms: linux/arm64
diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml
index 407b5545..d7ff1b6f 100644
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@@ -12,7 +12,6 @@ on:
 
 env:
   VERSION: 0.10.4
-  DOCKER_CONTENT_TRUST: 1
 jobs:
   build:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
@@ -42,6 +41,8 @@ jobs:
 
       - name: Build Development
         uses: docker/build-push-action@v6
+        env:
+          DOCKER_CONTENT_TRUST: 1
         with:
           context: ./docker/development
           platforms: linux/amd64
@@ -53,6 +54,8 @@ jobs:
 
       - name: Build Development Arm64
         uses: docker/build-push-action@v6
+        env:
+          DOCKER_CONTENT_TRUST: 1
         with:
           context: ./docker/development
           platforms: linux/arm64
@@ -64,6 +67,8 @@ jobs:
 
       - name: Build Production
         uses: docker/build-push-action@v6
+        env:
+          DOCKER_CONTENT_TRUST: 1
         with:
           context: ./docker/production
           platforms: linux/amd64
@@ -75,6 +80,8 @@ jobs:
 
       - name: Build Production Arm64
         uses: docker/build-push-action@v6
+        env:
+          DOCKER_CONTENT_TRUST: 1
         with:
           context: ./docker/production
           platforms: linux/arm64