From 2b29406dc436badb9e40e3961861e171dd769966 Mon Sep 17 00:00:00 2001
From: gunnar <gunnar@users.noreply.github.com>
Date: Sat, 6 Jun 2026 21:54:34 +0200
Subject: [PATCH] next try cosign

---
 .gitea/workflows/build.yml | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 20b8c01..e726f7b 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -139,19 +139,19 @@ jobs:
         uses: sigstore/cosign-installer@v4.1.2
 
       - name: Sign container image
-            if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
-            run: |
-              IMAGE_REF="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}"
+        if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
+        env:
+          COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
+          COSIGN_PASSWORD: ""
+        run: |
+          IMAGE_REF="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}"
 
-              echo "Fetching digest for $IMAGE_REF..."
-              DIGEST=$(skopeo inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://$IMAGE_REF --format '{{.Digest}}')
+          echo "Fetching digest for $IMAGE_REF..."
+          DIGEST=$(skopeo inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://$IMAGE_REF --format '{{.Digest}}')
 
-              echo "Signing OCI reference with Legacy settings..."
-              cosign sign -y \
-                --key env://COSIGN_PRIVATE_KEY \
-                --registry-referrers-mode=legacy \
-                --new-bundle-format=false \
-                "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${DIGEST}"
-            env:
-              COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
-              COSIGN_PASSWORD: ""
+          echo "Signing with legacy settings..."
+          cosign sign -y \
+            --key env://COSIGN_PRIVATE_KEY \
+            --registry-referrers-mode=legacy \
+            --new-bundle-format=false \
+            "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${DIGEST}"