Verify base & sign commits/tags

Author: dflook

.github/workflows/release.yaml

@@ -148,7 +148,7 @@ jobs:
 
               # git tags that use DockerHub for the image
               prepare_release
-              sed -i "s|  image:.*|  image: docker://danielflook/terraform-github-actions-dev@$IMAGE_DIGEST|" "$HOME/$action/action.yaml"
+              sed -i "s|  image:.*|  image: docker://danielflook/terraform-github-actions-dev@$IMAGE_DIGEST|" "$HOME/$action/action.yml"
 
               git -C "$HOME/$action" add -A
               git -C "$HOME/$action" commit -m "$RELEASE_TAG"
@@ -164,7 +164,7 @@ jobs:
               # git tags that use GitHub Container Registry for the image
               git -C "$HOME/$action" checkout ghcr || git -C "$HOME/$action" checkout -b ghcr
               prepare_release
-              sed -i "s|  image:.*|  image: docker://ghcr.io/dflook/terraform-github-actions-dev@$IMAGE_DIGEST|" "$HOME/$action/action.yaml"
+              sed -i "s|  image:.*|  image: docker://ghcr.io/dflook/terraform-github-actions-dev@$IMAGE_DIGEST|" "$HOME/$action/action.yml"
           
               git -C "$HOME/$action" add -A
               git -C "$HOME/$action" commit -m "$RELEASE_TAG-ghcr"