humocs-man/fluffy-pancake
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

changed signing method

Browse Source
This commit is contained in:
gunnar
2026-06-06 16:55:51 +02:00
parent 4ebd6abbda
commit b8d2f4b2fe
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/build.yml
+3
View File
@@ -114,8 +114,11 @@ jobs:
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false' if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
run: | run: |
DIGEST=$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable --format '{{.Digest}}') DIGEST=$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable --format '{{.Digest}}')
# Wir signieren den Digest und zwingen Cosign in den modernen OCI 1.1 Modus
cosign sign -y \ cosign sign -y \
--key env://COSIGN_PRIVATE_KEY \ --key env://COSIGN_PRIVATE_KEY \
--oci-11=true \
"humocs-man.duckdns.org/humocs-man/fluffy-pancake@${DIGEST}" "humocs-man.duckdns.org/humocs-man/fluffy-pancake@${DIGEST}"
env: env:
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}