next try cosign

2026-06-06 22:18:25 +02:00
parent 2c282fdb3c
commit 92bebe93b8
1 changed files with 2 additions and 3 deletions
@@ -149,10 +149,9 @@ jobs:
          echo "Fetching digest for $IMAGE_REF..."
          DIGEST=$(skopeo inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://$IMAGE_REF --format '{{.Digest}}')

-          echo "Signing with legacy settings..."
-          # Wir nutzen --tlog-upload=false, da Gitea/Private Registry kein externes Rekor-Log brauchen
+          echo "Signing with legacy settings and skipping tlog..."
          cosign sign -y \
            --key env://COSIGN_PRIVATE_KEY \
            --registry-referrers-mode=legacy \
-            --tlog-upload=false \
+            --skip-tlog \
            "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${DIGEST}"