diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml index 8aa0edd..4b1b2e9 100644 --- a/.gitea/workflows/build.yml +++ b/.gitea/workflows/build.yml @@ -149,10 +149,9 @@ jobs: echo "Fetching digest for $IMAGE_REF..." DIGEST=$(skopeo inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://$IMAGE_REF --format '{{.Digest}}') - echo "Signing with legacy settings..." - # Wir nutzen --tlog-upload=false, da Gitea/Private Registry kein externes Rekor-Log brauchen + echo "Signing with legacy settings and skipping tlog..." cosign sign -y \ --key env://COSIGN_PRIVATE_KEY \ --registry-referrers-mode=legacy \ - --tlog-upload=false \ + --skip-tlog \ "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${DIGEST}"