humocs-man/fluffy-pancake
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

signing test-images

Browse Source
This commit is contained in:
humocs-man
2026-09-27 13:59:13 +02:00
parent ad23a62417
commit ac2eaf49d5
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/build-v2.yml
+6 -3
View File
@@ -264,9 +264,12 @@ jobs:
# ------------------------------------------------------------ # ------------------------------------------------------------
# Install Cosign # Install Cosign
# ------------------------------------------------------------ # ------------------------------------------------------------
# HINWEIS (labwc-Zweig): Auch Test-Tags werden signiert, damit sie die
# lokale sigstoreSigned-Policy bestehen. Test-Images bleiben an ihrem
# test-*-Tag erkennbar; :stable wird dadurch nicht beruehrt.
- name: Install Cosign - name: Install Cosign
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false' if: github.event_name != 'pull_request'
uses: sigstore/cosign-installer@v4.1.2 uses: sigstore/cosign-installer@v4.1.2
# ------------------------------------------------------------ # ------------------------------------------------------------
@@ -274,7 +277,7 @@ jobs:
# ------------------------------------------------------------ # ------------------------------------------------------------
- name: Sign container image (Recursive Digest) - name: Sign container image (Recursive Digest)
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false' if: github.event_name != 'pull_request'
env: env:
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
COSIGN_PASSWORD: "" COSIGN_PASSWORD: ""
@@ -291,7 +294,7 @@ jobs:
OUTER_DIGEST=$( OUTER_DIGEST=$(
skopeo inspect \ skopeo inspect \
--creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" \ --creds "${{ github.repository_owner }}:${{ secrets.REGISTRY }}" \
"docker://${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.DEFAULT_TAG }}" \ "docker://${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}" \
| jq -r .Digest | jq -r .Digest
) )