switched to cosign legacy mode

2026-06-06 10:01:33 +02:00
parent 0da16e8fb4
commit da531d668f
1 changed files with 3 additions and 3 deletions
@@ -107,14 +107,14 @@ jobs:
        if: github.event_name != 'pull_request'
        uses: sigstore/cosign-installer@v4.1.2

-      - name: Sign container image (OCI Referrers Mode)
+      - name: Sign container image (Force Legacy Tag Mode)
        if: github.event_name != 'pull_request' && env.IS_TEST_BUILD == 'false'
        run: |
          cosign sign -y \
            --key env://COSIGN_PRIVATE_KEY \
-            --registry-referrers-mode oci-1-1 \
+            --registry-referrers-mode legacy \
            "${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build_image.outputs.digest }}"
        env:
-          COSIGN_EXPERIMENTAL: true
+          COSIGN_EXPERIMENTAL: false
          COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
          COSIGN_PASSWORD: ""