next try cosign no.4

2026-06-06 23:49:21 +02:00
parent 92bebe93b8
commit 57ebd49232
1 changed files with 4 additions and 2 deletions
@@ -149,9 +149,11 @@ jobs:
          echo "Fetching digest for $IMAGE_REF..."
          DIGEST=$(skopeo inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://$IMAGE_REF --format '{{.Digest}}')

-          echo "Signing with legacy settings and skipping tlog..."
+          echo "Signing image with explicit Cosign v3 legacy bypass..."
          cosign sign -y \
            --key env://COSIGN_PRIVATE_KEY \
+            --use-signing-config=false \
+            --new-bundle-format=false \
+            --tlog-upload=false \
            --registry-referrers-mode=legacy \
-            --skip-tlog \
            "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${DIGEST}"