fix sign step
All checks were successful
Docker Build Smart Logic / Build amd64 & arm64 (push) Successful in 23s

This commit is contained in:
2026-02-09 21:19:52 +01:00
parent 86e7bb52e3
commit 3dd74cdda9

View File

@@ -252,18 +252,17 @@ jobs:
cosign version cosign version
- name: Sign image - name: Sign image
if: env.IS_TAG == 'true'
shell: bash shell: bash
run: | run: |
set -euo pipefail set -euo pipefail
IMAGE_TO_SIGN="${REGISTRY_HOST}/${IMAGE_BASE}:${VERSION}" IMAGE_TO_SIGN="${REGISTRY_HOST}/${IMAGE_BASE}:${VERSION}"
echo "Signing image $IMAGE_TO_SIGN" echo "Signing image $IMAGE_TO_SIGN"
# Cosign login falls nötig # Key nur für Tags nutzen
export COSIGN_PASSWORD="${{ secrets.COSIGN_KEY }}" cosign sign --key <(echo "${{ secrets.COSIGN_KEY }}") "$IMAGE_TO_SIGN"
cosign sign --key <(echo "$COSIGN_PASSWORD") "$IMAGE_TO_SIGN"