feat(verify): Parse output with jq for cleaner formatting

Requires we enable pipefail so that the action fails when verification fails
EyeCantCU · Dec 27, 2023 · a3aa801 · a3aa801
1 parent d904c76
commit a3aa801
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/verify/action.yml b/verify/action.yml
@@ -29,13 +29,14 @@ runs:
       shell: bash
       run: |
         REGISTRY=$(echo ${{ inputs.registry }} | awk '{print tolower($0)}')
+        set -o pipefail
         if [[ -n "${{ inputs.cert-identity }}" && -n "${{ inputs.oidc-issuer }}" ]]; then
           for CONTAINER in $(echo "${CONTAINERS}" | tr "," "\n"); do
-            cosign verify $REGISTRY/${CONTAINER} --certificate-identity=${{ inputs.cert-identity }} --certificate-oidc-issuer=${{ inputs.oidc-issuer }}
+            cosign verify $REGISTRY/${CONTAINER} --certificate-identity=${{ inputs.cert-identity }} --certificate-oidc-issuer=${{ inputs.oidc-issuer }} | jq
           done
         elif [[ -n "${{ inputs.pubkey }}" ]]; then
           for CONTAINER in $(echo "${CONTAINERS}" | tr "," "\n"); do
-            cosign verify --key ${{ inputs.pubkey }} $REGISTRY/${CONTAINER}
+            cosign verify --key ${{ inputs.pubkey }} $REGISTRY/${CONTAINER} | jq
           done
         else
           exit 1