switched to cosign legacy mode

This commit is contained in:
gunnar
2026-06-06 10:01:33 +02:00
parent 0da16e8fb4
commit da531d668f
+3 -3
View File
@@ -107,14 +107,14 @@ jobs:
if: github.event_name != 'pull_request' if: github.event_name != 'pull_request'
uses: sigstore/cosign-installer@v4.1.2 uses: sigstore/cosign-installer@v4.1.2
- name: Sign container image (OCI Referrers Mode) - name: Sign container image (Force Legacy Tag Mode)
if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false' if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
run: | run: |
cosign sign -y \ cosign sign -y \
--key env://COSIGN_PRIVATE_KEY \ --key env://COSIGN_PRIVATE_KEY \
--registry-referrers-mode oci-1-1 \ --registry-referrers-mode legacy \
"${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build_image.outputs.digest }}" "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build_image.outputs.digest }}"
env: env:
COSIGN_EXPERIMENTAL: true COSIGN_EXPERIMENTAL: false
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
COSIGN_PASSWORD: "" COSIGN_PASSWORD: ""