humocs-man/fluffy-pancake
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

changed signing-method

Browse Source
This commit is contained in:
gunnar
2026-06-06 09:11:38 +02:00
parent 12eb3f0f7f
commit 5460907c9b
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/build.yml
+7 -5
View File
@@ -81,8 +81,8 @@ jobs:
ostree.bootable=1 ostree.bootable=1
- name: Login to Gitea Container Registry - name: Login to Gitea Container Registry
uses: docker/login-action@v3
if: github.event_name != 'pull_request' if: github.event_name != 'pull_request'
uses: docker/login-action@v3
with: with:
registry: ${{ env.REGISTRY_HOST }} registry: ${{ env.REGISTRY_HOST }}
username: ${{ github.repository_owner }} username: ${{ github.repository_owner }}
@@ -104,15 +104,17 @@ jobs:
sudo apt-get update && sudo apt-get install -y gettext sudo apt-get update && sudo apt-get install -y gettext
- name: Install Cosign - name: Install Cosign
uses: sigstore/cosign-installer@v4.1.2
if: github.event_name != 'pull_request' if: github.event_name != 'pull_request'
uses: sigstore/cosign-installer@v4.1.2
- name: Sign container image - name: Sign container image (OCI Referrers Mode)
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false' if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
run: | run: |
cosign sign -y --key env://COSIGN_PRIVATE_KEY "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build_image.outputs.digest }}" cosign sign -y \
--registry-referrers-api=oci \
--key env://COSIGN_PRIVATE_KEY \
"${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build_image.outputs.digest }}"
env: env:
COSIGN_EXPERIMENTAL: false COSIGN_EXPERIMENTAL: false
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
# Verhindert, dass Cosign interaktiv nach einem Passwort sucht:
COSIGN_PASSWORD: "" COSIGN_PASSWORD: ""