.gitea/workflows/build.yml aktualisiert

2026-09-05 19:10:08 +00:00
parent 9de003d503
commit b938527c27
1 changed files with 2 additions and 4 deletions
@@ -119,16 +119,14 @@ jobs:
        run: |
          echo "${{ secrets.REGISTRY }}" | cosign login "${{ env.REGISTRY_HOST }}" -u "${{ github.repository_owner }}" --password-stdin

-          IMAGE_REF="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build_image.outputs.digest }}"
-          echo "Signiere Manifest via Direct Digest: ${IMAGE_REF}"
-
+          # Signiere den Tag (Manifest List / Index) rekursiv
          cosign sign -y \
            --key env://COSIGN_PRIVATE_KEY \
            --recursive \
            --use-signing-config=false \
            --new-bundle-format=false \
            --registry-referrers-mode=legacy \
-            "${IMAGE_REF}"
+            "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.DEFAULT_TAG }}"

      - name: Post-Build Cleanup
        if: always()