.gitea/workflows/redhat_build.yml aktualisiert

.gitea/workflows/redhat_build.yml

@@ -1,4 +1,4 @@
-name: Red Hat Build container image
+name: Build container image
 
 on:
   # pull_request:
@@ -52,7 +52,7 @@ jobs:
             echo "IS_TEST_BUILD=true" >> ${GITHUB_ENV}
           fi
 
-      - name: Checkout
+      - name: Checkout repository
         uses: actions/checkout@v4
 
       - name: Image Metadata
@@ -78,10 +78,10 @@ jobs:
             containers.bootc=1
             ostree.bootable=1
 
-      # 1. Image mit Buildah bauen
+      # 1. Image mit Buildah v3 bauen
       - name: Build Image with Buildah
         id: build_image
-        uses: redhat-actions/buildah-build@v2
+        uses: redhat-actions/buildah-build@v3
         with:
           image: ${{ env.IMAGE_NAME }}
           tags: ${{ env.IMAGE_TAG }}
@@ -96,11 +96,17 @@ jobs:
 
       # 3. Chunkah via Action auf das OCI-Verzeichnis anwenden
       - name: Process OCI Image with Chunkah
-        uses: coreos/chunkah-action@v1
+        uses: coreos/chunkah-action@main
         with:
           target: ./oci-image
 
-      # 4. Gechunketes Image für ALLE generierten Tags in die Registry pushen
+      # 4. Skopeo via Action bereitstellen
+      - name: Setup Skopeo
+        uses: warjiang/setup-skopeo@v1
+        with:
+          version: 'latest'
+
+      # 5. Gechunketes Image für ALLE generierten Tags pushen & Digest erfassen
       - name: Push Chunked Image to Registry
         run: |
           echo "${{ secrets.REGISTRY }}" | skopeo login "${{ env.REGISTRY_HOST }}" -u "${{ github.repository_owner }}" --password-stdin
@@ -113,15 +119,15 @@ jobs:
               oci:./oci-image "docker://${TAG_REF}"
           done
           
-          # Speichere den erzeugten Manifest-Digest für den Cosign-Schritt
+          # Exakten Manifest-Digest für Cosign im GITHUB_ENV speichern
           echo "IMAGE_DIGEST=$(cat /tmp/digest.txt)" >> ${GITHUB_ENV}
 
-      # 5. Cosign installieren
+      # 6. Cosign installieren
       - name: Install Cosign
         if: env.IS_TEST_BUILD == 'false'
         uses: sigstore/cosign-installer@v3
 
-      # 6. Container Image signieren
+      # 7. Container Image signieren
       - name: Sign container image
         if: env.IS_TEST_BUILD == 'false'
         env:
@@ -139,10 +145,10 @@ jobs:
             --registry-referrers-mode=legacy \
             "${IMAGE_REF}"
 
-      # 7. Lokalen OCI-Ordner und Buildah-Storage aufräumen
+      # 8. Lokalen OCI-Ordner, temp-Dateien und Buildah-Storage aufräumen
       - name: Post-Build Cleanup
         if: always()
         run: |
-          echo "Bereinige temporären OCI-Ordner und Buildah-Storage..."
+          echo "Bereinige temporären OCI-Ordner, temporäre Dateien und Buildah-Storage..."
           rm -rf ./oci-image /tmp/digest.txt || true
           buildah rmi --all --force || true