humocs-man/fluffy-pancake
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

.gitea/workflows/build.yml aktualisiert

Browse Source
This commit is contained in:
humocs-man
2026-07-11 13:34:10 +00:00
parent cc34f708d1
commit 8a7cf60dde
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/build.yml
+8 -3
View File
@@ -108,6 +108,11 @@ jobs:
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false' if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
uses: sigstore/cosign-installer@v4.1.2 uses: sigstore/cosign-installer@v4.1.2
- name: Install Skopeo
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
run: |
sudo apt-get update && sudo apt-get install -y skopeo
- name: Sign container image (True Outer Digest) - name: Sign container image (True Outer Digest)
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false' if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
env: env:
@@ -117,9 +122,9 @@ jobs:
# 1. Cosign an der Gitea-Registry anmelden # 1. Cosign an der Gitea-Registry anmelden
echo "${{ secrets.REGISTRY }}" | cosign login "${{ env.REGISTRY_HOST }}" -u "${{ github.repository_owner }}" --password-stdin echo "${{ secrets.REGISTRY }}" | cosign login "${{ env.REGISTRY_HOST }}" -u "${{ github.repository_owner }}" --password-stdin
# 2. Mit skopeo den echten, äußeren Manifest-List-Digest von Gitea abfragen # 2. Skopeo als Docker-Container ausführen, um den Digest zu holen
echo "Frage finalen Manifest-List-Digest von Gitea ab..." echo "Frage finalen Manifest-List-Digest via Skopeo-Container ab..."
OUTER_DIGEST=$(skopeo inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:stable | jq -r .Digest) OUTER_DIGEST=$(docker run --rm quay.io/skopeo/stable inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:stable | jq -r .Digest)
# 3. Die Referenz exklusiv über den äußeren Digest bauen # 3. Die Referenz exklusiv über den äußeren Digest bauen
IMAGE_REF="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${OUTER_DIGEST}" IMAGE_REF="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${OUTER_DIGEST}"