diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index e069a2b..c3dae97 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -115,11 +115,12 @@ jobs:
         run: |
           DIGEST=$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable --format '{{.Digest}}')
 
+          # Flag und Wert korrekt kombiniert:
           cosign sign -y \
             --key env://COSIGN_PRIVATE_KEY \
-            --oci-1-1=true \
+            --registry-referrers-mode=oci-1-1 \
             "humocs-man.duckdns.org/humocs-man/fluffy-pancake@${DIGEST}"
         env:
           COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
           COSIGN_PASSWORD: ""
-          COSIGN_EXPERIMENTAL: "1"  # <-- Hier schalten wir den OCI-Referrer-Modus in der Pipeline frei!
+          COSIGN_EXPERIMENTAL: "1"