---
kind: pipeline
type: docker
name: default

steps:
  - name: publish
    image: plugins/kaniko
    settings:
      registry:
        from_secret: docker_registry
      username:
        from_secret: docker_username
      password:
        from_secret: docker_password
      repo:
        from_secret: docker_repo
      tags: latest
    when:
      event:
        - push
        - tag

---
kind: signature
hmac: d4afc165e4cf783c485a9236dc7fc7f0f7462f03ca1b3dc9a2096debb39f3245

...