another cosign fix

This commit is contained in:
gunnar
2026-06-06 11:03:14 +02:00
parent 64a904b3ab
commit 18b597392a
+3 -3
View File
@@ -107,13 +107,13 @@ jobs:
if: github.event_name != 'pull_request' if: github.event_name != 'pull_request'
uses: sigstore/cosign-installer@v4.1.2 uses: sigstore/cosign-installer@v4.1.2
- name: Sign container image -- name: Sign container image
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false' if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
run: | run: |
# Cosign löst das Tag automatisch zum Digest auf und signiert DIESEN DIGEST=$(docker inspect --format='{{index .RepoDigests 0}}' humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable)
cosign sign -y \ cosign sign -y \
--key env://COSIGN_PRIVATE_KEY \ --key env://COSIGN_PRIVATE_KEY \
"humocs-man.duckdns.org/humocs-man/fluffy-pancake@$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable | jq -r .Digest)" "$DIGEST"
env: env:
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
COSIGN_PASSWORD: "" COSIGN_PASSWORD: ""