From 4235f787e51ef913ae2ae78052c2d771b01f515f Mon Sep 17 00:00:00 2001
From: James Moore <jamesmoore@users.noreply.github.com>
Date: Tue, 28 Jun 2022 08:00:44 +0100
Subject: [PATCH] fix cosign command line args

---
 ci/docker-publish.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ci/docker-publish.yml b/ci/docker-publish.yml
index 71aff41..e88539d 100644
--- a/ci/docker-publish.yml
+++ b/ci/docker-publish.yml
@@ -90,4 +90,4 @@ jobs:
           COSIGN_EXPERIMENTAL: "true"
         # This step uses the identity token to provision an ephemeral certificate
         # against the sigstore community Fulcio instance.
-        run: cosign sign ${{ steps.meta.outputs.tags }}@${{ steps.build-and-push.outputs.digest }}
+        run: echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign sign {}@${{ steps.build-and-push.outputs.digest }}