.gitea/workflows/build.yml aktualisiert
This commit is contained in:
@@ -119,16 +119,14 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
echo "${{ secrets.REGISTRY }}" | cosign login "${{ env.REGISTRY_HOST }}" -u "${{ github.repository_owner }}" --password-stdin
|
echo "${{ secrets.REGISTRY }}" | cosign login "${{ env.REGISTRY_HOST }}" -u "${{ github.repository_owner }}" --password-stdin
|
||||||
|
|
||||||
IMAGE_REF="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build_image.outputs.digest }}"
|
# Signiere den Tag (Manifest List / Index) rekursiv
|
||||||
echo "Signiere Manifest via Direct Digest: ${IMAGE_REF}"
|
|
||||||
|
|
||||||
cosign sign -y \
|
cosign sign -y \
|
||||||
--key env://COSIGN_PRIVATE_KEY \
|
--key env://COSIGN_PRIVATE_KEY \
|
||||||
--recursive \
|
--recursive \
|
||||||
--use-signing-config=false \
|
--use-signing-config=false \
|
||||||
--new-bundle-format=false \
|
--new-bundle-format=false \
|
||||||
--registry-referrers-mode=legacy \
|
--registry-referrers-mode=legacy \
|
||||||
"${IMAGE_REF}"
|
"${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.DEFAULT_TAG }}"
|
||||||
|
|
||||||
- name: Post-Build Cleanup
|
- name: Post-Build Cleanup
|
||||||
if: always()
|
if: always()
|
||||||
|
|||||||
Reference in New Issue
Block a user