From 4a4d8d9eda564a202a1987334fe1f5786b1f8146 Mon Sep 17 00:00:00 2001 From: Drath Date: Sun, 30 Aug 2026 18:50:34 +0200 Subject: [PATCH] sosign --- .gitea/workflows/build.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml index b2a9f6a..1bf7cd1 100644 --- a/.gitea/workflows/build.yml +++ b/.gitea/workflows/build.yml @@ -31,6 +31,7 @@ jobs: env: COSIGN_PASSWORD: ${{ secrets.COSIGN_PW }} run: | + echo "${{ secrets.OCI_PASSWD }}" | cosign login ${{ vars.OCI_REGISTRY }} -u gitea --password-stdin echo "${{ secrets.COSIGN_KEY }}" > cosign.key DIGEST=$(skopeo inspect --creds "gitea:${{ secrets.OCI_PASSWD }}" --format '{{.Digest}}' docker://${{ vars.OCI_REGISTRY }}/drath/dev-toolbx:${{ matrix.variant }}) cosign sign --yes --key cosign.key "${{ vars.OCI_REGISTRY }}/drath/dev-toolbx@${DIGEST}"