changed signing method
This commit is contained in:
@@ -115,10 +115,10 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
DIGEST=$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable --format '{{.Digest}}')
|
DIGEST=$(skopeo inspect docker://humocs-man.duckdns.org/humocs-man/fluffy-pancake:stable --format '{{.Digest}}')
|
||||||
|
|
||||||
# Wir signieren den Digest und zwingen Cosign in den modernen OCI 1.1 Modus
|
# Hier nutzen wir das korrekte Flag für Cosign v2
|
||||||
cosign sign -y \
|
cosign sign -y \
|
||||||
--key env://COSIGN_PRIVATE_KEY \
|
--key env://COSIGN_PRIVATE_KEY \
|
||||||
--oci-11=true \
|
--registry-referrers-mode=oci-1.1 \
|
||||||
"humocs-man.duckdns.org/humocs-man/fluffy-pancake@${DIGEST}"
|
"humocs-man.duckdns.org/humocs-man/fluffy-pancake@${DIGEST}"
|
||||||
env:
|
env:
|
||||||
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
|
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
|
||||||
|
|||||||
Reference in New Issue
Block a user