changed signing method

2026-06-06 16:55:51 +02:00
parent 4ebd6abbda
commit b8d2f4b2fe
1 changed files with 3 additions and 0 deletions
@@ -114,8 +114,11 @@ jobs:
        if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
        run: |
          DIGEST=$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable --format '{{.Digest}}')
+
+          # Wir signieren den Digest und zwingen Cosign in den modernen OCI 1.1 Modus
          cosign sign -y \
            --key env://COSIGN_PRIVATE_KEY \
+            --oci-11=true \
            "humocs-man.duckdns.org/humocs-man/fluffy-pancake@${DIGEST}"
        env:
          COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}