diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml index ca82379..b3ac20f 100644 --- a/.gitea/workflows/build.yml +++ b/.gitea/workflows/build.yml @@ -107,13 +107,13 @@ jobs: if: github.event_name != 'pull_request' uses: sigstore/cosign-installer@v4.1.2 - - name: Sign container image + -- name: Sign container image if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false' run: | - # Cosign löst das Tag automatisch zum Digest auf und signiert DIESEN + DIGEST=$(docker inspect --format='{{index .RepoDigests 0}}' humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable) cosign sign -y \ --key env://COSIGN_PRIVATE_KEY \ - "humocs-man.duckdns.org/humocs-man/fluffy-pancake@$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable | jq -r .Digest)" + "$DIGEST" env: COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} COSIGN_PASSWORD: ""