next try cosign no.4

This commit is contained in:
gunnar
2026-06-06 23:49:21 +02:00
parent 92bebe93b8
commit 57ebd49232
+4 -2
View File
@@ -149,9 +149,11 @@ jobs:
echo "Fetching digest for $IMAGE_REF..." echo "Fetching digest for $IMAGE_REF..."
DIGEST=$(skopeo inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://$IMAGE_REF --format '{{.Digest}}') DIGEST=$(skopeo inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://$IMAGE_REF --format '{{.Digest}}')
echo "Signing with legacy settings and skipping tlog..." echo "Signing image with explicit Cosign v3 legacy bypass..."
cosign sign -y \ cosign sign -y \
--key env://COSIGN_PRIVATE_KEY \ --key env://COSIGN_PRIVATE_KEY \
--use-signing-config=false \
--new-bundle-format=false \
--tlog-upload=false \
--registry-referrers-mode=legacy \ --registry-referrers-mode=legacy \
--skip-tlog \
"${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${DIGEST}" "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${DIGEST}"