From 8b4679ef7f53d24c8b560a09f54ee11b110cbd89 Mon Sep 17 00:00:00 2001
From: gunnar <gunnar@users.noreply.github.com>
Date: Fri, 12 Jun 2026 20:27:50 +0200
Subject: [PATCH] changed signing logic

---
 .gitea/workflows/build.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index e30f17a..5bf6442 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -160,10 +160,16 @@ jobs:
           COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
           COSIGN_PASSWORD: ""
         run: |
+          # 1. Cosign an der Gitea-Registry anmelden
+          cosign login "${{ env.REGISTRY_HOST }}" -u "${{ github.repository_owner }}" -p "${{ secrets.REGISTRY }}"
+
+          # 2. Den reinen Digest aus dem Buildah-Schritt holen
           IMAGE_DIGEST="${{ steps.build_image.outputs.digest }}"
           IMAGE_REF="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${IMAGE_DIGEST}"
 
-          echo "Signiere Image via Digest: ${IMAGE_REF}"
+          echo "Signiere exklusiv via Digest: ${IMAGE_REF}"
+
+          # 3. Signierung ausführen
           cosign sign -y \
             --key env://COSIGN_PRIVATE_KEY \
             --use-signing-config=false \