humocs-man/fluffy-pancake
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

.gitea/workflows/build.yml aktualisiert

Browse Source
This commit is contained in:
humocs-man
2026-09-05 21:00:23 +00:00
parent dd5da058f3
commit 5a49386921
1 changed files with 33 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/build.yml
+33 -7
View File
@@ -113,6 +113,21 @@ jobs:
BUILDKIT_OCI_MEDIATYPE=true BUILDKIT_OCI_MEDIATYPE=true
outputs: ${{ github.event_name != 'pull_request' && format('type=registry,push=true,oci-mediatypes=true,compression=zstd,compression-args=binary-path=/usr/bin/go-zstd-chunked') || '' }} outputs: ${{ github.event_name != 'pull_request' && format('type=registry,push=true,oci-mediatypes=true,compression=zstd,compression-args=binary-path=/usr/bin/go-zstd-chunked') || '' }}
- name: Inspect pushed image
if: github.event_name != 'pull_request' && github.ref_name == 'main'
run: |
set -euo pipefail
IMAGE="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}"
DIGEST="${{ steps.build_image.outputs.digest }}"
echo "Buildx digest:"
echo "${DIGEST}"
echo
echo "Registry digest:"
docker buildx imagetools inspect \
"${IMAGE}:${DEFAULT_TAG}"
- name: Install gettext dependencies - name: Install gettext dependencies
if: github.event_name != 'pull_request' && github.ref_name == 'main' if: github.event_name != 'pull_request' && github.ref_name == 'main'
@@ -150,7 +165,7 @@ jobs:
--registry-referrers-mode=legacy \ --registry-referrers-mode=legacy \
"${IMAGE}@${DIGEST}" "${IMAGE}@${DIGEST}"
- name: Verify container image - name: Debug container signature
if: github.event_name != 'pull_request' && github.ref_name == 'main' if: github.event_name != 'pull_request' && github.ref_name == 'main'
run: | run: |
set -euo pipefail set -euo pipefail
@@ -158,13 +173,24 @@ jobs:
IMAGE="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}" IMAGE="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}"
DIGEST="${{ steps.build_image.outputs.digest }}" DIGEST="${{ steps.build_image.outputs.digest }}"
test -f configs/cosign.pub echo "Image: ${IMAGE}"
echo "Digest: ${DIGEST}"
cosign verify \ echo
--key configs/cosign.pub \ echo "=== Cosign version ==="
--new-bundle-format=false \ cosign version
--registry-referres-mode=legacy \
"${IMAGE}@${DIGEST}" echo
echo "=== Cosign tree ==="
cosign tree \
--registry-referrers-mode=legacy \
"${IMAGE}@${DIGEST}"
echo
echo "=== Cosign download signature ==="
cosign download signature \
- -registry-referrers-mode=legacy \
"${IMAGE}@${DIGEST}"
- name: Post-Build Cleanup - name: Post-Build Cleanup
if: always() if: always()