diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml index cfb1fd1..adf6aa2 100644 --- a/.gitea/workflows/build.yml +++ b/.gitea/workflows/build.yml @@ -107,14 +107,14 @@ jobs: if: github.event_name != 'pull_request' uses: sigstore/cosign-installer@v4.1.2 - - name: Sign container image (OCI Referrers Mode) + - name: Sign container image (Force Legacy Tag Mode) if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false' run: | cosign sign -y \ --key env://COSIGN_PRIVATE_KEY \ - --registry-referrers-mode oci-1-1 \ + --registry-referrers-mode legacy \ "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build_image.outputs.digest }}" env: - COSIGN_EXPERIMENTAL: true + COSIGN_EXPERIMENTAL: false COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} COSIGN_PASSWORD: ""