diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 91d0fff..e3a7506 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -114,8 +114,11 @@ jobs:
         if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
         run: |
           DIGEST=$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable --format '{{.Digest}}')
+
+          # Wir signieren den Digest und zwingen Cosign in den modernen OCI 1.1 Modus
           cosign sign -y \
             --key env://COSIGN_PRIVATE_KEY \
+            --oci-11=true \
             "humocs-man.duckdns.org/humocs-man/fluffy-pancake@${DIGEST}"
         env:
           COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}