changed signing method

This commit is contained in:
gunnar
2026-06-06 17:08:20 +02:00
parent b8d2f4b2fe
commit fa349dad2f
+2 -2
View File
@@ -115,10 +115,10 @@ jobs:
run: | run: |
DIGEST=$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable --format '{{.Digest}}') DIGEST=$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable --format '{{.Digest}}')
# Wir signieren den Digest und zwingen Cosign in den modernen OCI 1.1 Modus # Hier nutzen wir das korrekte Flag für Cosign v2
cosign sign -y \ cosign sign -y \
--key env://COSIGN_PRIVATE_KEY \ --key env://COSIGN_PRIVATE_KEY \
--oci-11=true \ --registry-referrers-mode=oci-1.1 \
"humocs-man.duckdns.org/humocs-man/fluffy-pancake@${DIGEST}" "humocs-man.duckdns.org/humocs-man/fluffy-pancake@${DIGEST}"
env: env:
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }} COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}