humocs-man/fluffy-pancake
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

changed signing logic

Browse Source
This commit is contained in:
gunnar
2026-06-12 20:27:50 +02:00
parent 34e13a0bbe
commit 8b4679ef7f
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/build.yml
+7 -1
View File
@@ -160,10 +160,16 @@ jobs:
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
COSIGN_PASSWORD: "" COSIGN_PASSWORD: ""
run: | run: |
# 1. Cosign an der Gitea-Registry anmelden
cosign login "${{ env.REGISTRY_HOST }}" -u "${{ github.repository_owner }}" -p "${{ secrets.REGISTRY }}"
# 2. Den reinen Digest aus dem Buildah-Schritt holen
IMAGE_DIGEST="${{ steps.build_image.outputs.digest }}" IMAGE_DIGEST="${{ steps.build_image.outputs.digest }}"
IMAGE_REF="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${IMAGE_DIGEST}" IMAGE_REF="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${IMAGE_DIGEST}"
echo "Signiere Image via Digest: ${IMAGE_REF}" echo "Signiere exklusiv via Digest: ${IMAGE_REF}"
# 3. Signierung ausführen
cosign sign -y \ cosign sign -y \
--key env://COSIGN_PRIVATE_KEY \ --key env://COSIGN_PRIVATE_KEY \
--use-signing-config=false \ --use-signing-config=false \