From fa349dad2f7496f6e3c1d19a930d90d65b820fda Mon Sep 17 00:00:00 2001
From: gunnar <gunnar@users.noreply.github.com>
Date: Sat, 6 Jun 2026 17:08:20 +0200
Subject: [PATCH] changed signing method

---
 .gitea/workflows/build.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index e3a7506..84c1267 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -115,10 +115,10 @@ jobs:
         run: |
           DIGEST=$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable --format '{{.Digest}}')
 
-          # Wir signieren den Digest und zwingen Cosign in den modernen OCI 1.1 Modus
+          # Hier nutzen wir das korrekte Flag für Cosign v2
           cosign sign -y \
             --key env://COSIGN_PRIVATE_KEY \
-            --oci-11=true \
+            --registry-referrers-mode=oci-1.1 \
             "humocs-man.duckdns.org/humocs-man/fluffy-pancake@${DIGEST}"
         env:
           COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}