humocs-man/fluffy-pancake
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

next try cosign

Browse Source
This commit is contained in:
gunnar
2026-06-06 22:07:10 +02:00
parent 2b29406dc4
commit 2c282fdb3c
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/build.yml
+2 -1
View File
@@ -150,8 +150,9 @@ jobs:
DIGEST=$(skopeo inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://$IMAGE_REF --format '{{.Digest}}') DIGEST=$(skopeo inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://$IMAGE_REF --format '{{.Digest}}')
echo "Signing with legacy settings..." echo "Signing with legacy settings..."
# Wir nutzen --tlog-upload=false, da Gitea/Private Registry kein externes Rekor-Log brauchen
cosign sign -y \ cosign sign -y \
--key env://COSIGN_PRIVATE_KEY \ --key env://COSIGN_PRIVATE_KEY \
--registry-referrers-mode=legacy \ --registry-referrers-mode=legacy \
--new-bundle-format=false \ --tlog-upload=false \
"${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${DIGEST}" "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${DIGEST}"