From 8d8b714fbb998d2940d2f1b75c1adf5760a7bb04 Mon Sep 17 00:00:00 2001
From: gunnar <gunnar@users.noreply.github.com>
Date: Sat, 6 Jun 2026 11:24:59 +0200
Subject: [PATCH] fix typo

---
 .gitea/workflows/build.yml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 8979dc9..70419bd 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -110,13 +110,9 @@ jobs:
       - name: Sign container image
         if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
         run: |
-          # 1. Wir lösen das Tag in der Registry zu einem Digest auf (kein Docker-Daemon nötig)
-          DIGEST=$(cosign resolve humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable)
-
-          # 2. Wir signieren EXAKT diesen Digest (als OCI-Referenz, nicht als Tag-Signature)
           cosign sign -y \
             --key env://COSIGN_PRIVATE_KEY \
-            "$DIGEST"
+            humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable
         env:
           COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
           COSIGN_PASSWORD: ""