From a3f424c898c8cee03a0279b96871eaedf6a95a32 Mon Sep 17 00:00:00 2001
From: PSanetra <code@psanetra.de>
Date: Mon, 26 Aug 2024 17:00:40 +0200
Subject: [PATCH] ci: Install missing cosign cli in `Update Images` workflow

---
 .github/workflows/main.yaml   | 4 ++--
 .github/workflows/update.yaml | 2 ++
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 76efa0d..21aed79 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -46,8 +46,6 @@ jobs:
           nginx-tag: "${{ steps.target_nginx_tag.outputs.tag }}"
           matrix-nginx: "${{ matrix.nginx }}"
           docker-repository: "${{ vars.DOCKER_REPOSITORY }}"
-      - name: Install Cosign
-        uses: sigstore/cosign-installer@v3
       - uses: docker/setup-qemu-action@v3
         name: Set up QEMU
       - uses: docker/setup-buildx-action@v3
@@ -70,6 +68,8 @@ jobs:
           build-args: NGINX_TAG=${{ steps.target_nginx_tag.outputs.tag }}
           provenance: mode=max
           sbom: true
+      - name: Install Cosign
+        uses: sigstore/cosign-installer@v3
       - name: Sign the images with GitHub OIDC Token
         if: ${{ steps.target_tags.outputs.tags != '' }}
         env:
diff --git a/.github/workflows/update.yaml b/.github/workflows/update.yaml
index 5c11f75..6c40404 100644
--- a/.github/workflows/update.yaml
+++ b/.github/workflows/update.yaml
@@ -94,6 +94,8 @@ jobs:
           build-args: NGINX_TAG=${{ steps.target_nginx_tag.outputs.tag }}
           provenance: mode=max
           sbom: true
+      - name: Install Cosign
+        uses: sigstore/cosign-installer@v3
       - name: Sign the images with GitHub OIDC Token
         if: ${{ steps.check_if_update_is_necessary.outputs.needs_update == 'true' && steps.target_image_name.outputs.tags != '' }}
         env: