diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 35a1eba..20b8c01 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -139,20 +139,19 @@ jobs:
         uses: sigstore/cosign-installer@v4.1.2
 
       - name: Sign container image
-        if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
-        run: |
-          # Dynamische Ziel-URL zusammenbauen
-          IMAGE_REF="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}"
+            if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
+            run: |
+              IMAGE_REF="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}"
 
-          echo "Fetching digest for $IMAGE_REF..."
-          DIGEST=$(skopeo inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://$IMAGE_REF --format '{{.Digest}}')
+              echo "Fetching digest for $IMAGE_REF..."
+              DIGEST=$(skopeo inspect --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" docker://$IMAGE_REF --format '{{.Digest}}')
 
-          echo "Signing OCI reference..."
-          cosign sign -y \
-            --key env://COSIGN_PRIVATE_KEY \
-            --registry-referrers-mode=oci-1-1 \
-            "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${DIGEST}"
-        env:
-          COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
-          COSIGN_PASSWORD: ""
-          COSIGN_EXPERIMENTAL: "1"
+              echo "Signing OCI reference with Legacy settings..."
+              cosign sign -y \
+                --key env://COSIGN_PRIVATE_KEY \
+                --registry-referrers-mode=legacy \
+                --new-bundle-format=false \
+                "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${DIGEST}"
+            env:
+              COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
+              COSIGN_PASSWORD: ""