---
kind: pipeline
type: docker
name: default

steps:
  - name: publish
    image: plugins/kaniko
    settings:
      registry:
        from_secret: docker_registry
      username:
        from_secret: docker_username
      password:
        from_secret: docker_password
      repo:
        from_secret: docker_repo
      auto_tag: true
    when:
      event:
        - push
        - tag

---
kind: signature
hmac: 112fcdd38044dcb41e96c345d0fb1ea7ae65dce74c4bbcc064a709ae07512785

...