diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 8c4748c..62783a1 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -119,16 +119,14 @@ jobs:
         run: |
           echo "${{ secrets.REGISTRY }}" | cosign login "${{ env.REGISTRY_HOST }}" -u "${{ github.repository_owner }}" --password-stdin
 
-          IMAGE_REF="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build_image.outputs.digest }}"
-          echo "Signiere Manifest via Direct Digest: ${IMAGE_REF}"
-
+          # Signiere den Tag (Manifest List / Index) rekursiv
           cosign sign -y \
             --key env://COSIGN_PRIVATE_KEY \
             --recursive \
             --use-signing-config=false \
             --new-bundle-format=false \
             --registry-referrers-mode=legacy \
-            "${IMAGE_REF}"
+            "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.DEFAULT_TAG }}"
 
       - name: Post-Build Cleanup
         if: always()