diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml index 4b1b2e9..cedf204 100644 --- a/.gitea/workflows/build.yml +++ b/.gitea/workflows/build.yml @@ -149,9 +149,11 @@ jobs: echo "Fetching digest for $IMAGE_REF..." DIGEST=$(skopeo inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://$IMAGE_REF --format '{{.Digest}}') - echo "Signing with legacy settings and skipping tlog..." + echo "Signing image with explicit Cosign v3 legacy bypass..." cosign sign -y \ --key env://COSIGN_PRIVATE_KEY \ + --use-signing-config=false \ + --new-bundle-format=false \ + --tlog-upload=false \ --registry-referrers-mode=legacy \ - --skip-tlog \ "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${DIGEST}"