From b938527c278efdff6f45e696ef04f676e6a7e791 Mon Sep 17 00:00:00 2001
From: humocs-man <1+humocs-man@noreply.localhost>
Date: Sat, 5 Sep 2026 19:10:08 +0000
Subject: [PATCH] .gitea/workflows/build.yml aktualisiert

---
 .gitea/workflows/build.yml | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 8c4748c..62783a1 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -119,16 +119,14 @@ jobs:
         run: |
           echo "${{ secrets.REGISTRY }}" | cosign login "${{ env.REGISTRY_HOST }}" -u "${{ github.repository_owner }}" --password-stdin
 
-          IMAGE_REF="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build_image.outputs.digest }}"
-          echo "Signiere Manifest via Direct Digest: ${IMAGE_REF}"
-
+          # Signiere den Tag (Manifest List / Index) rekursiv
           cosign sign -y \
             --key env://COSIGN_PRIVATE_KEY \
             --recursive \
             --use-signing-config=false \
             --new-bundle-format=false \
             --registry-referrers-mode=legacy \
-            "${IMAGE_REF}"
+            "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.DEFAULT_TAG }}"
 
       - name: Post-Build Cleanup
         if: always()