diff --git a/.gitea/workflows/docker-builder.yml b/.gitea/workflows/docker-builder.yml index 96886cd..b998a30 100644 --- a/.gitea/workflows/docker-builder.yml +++ b/.gitea/workflows/docker-builder.yml @@ -252,22 +252,19 @@ jobs: cosign version - name: Sign image - if: env.IS_TAG == 'true' shell: bash run: | set -euo pipefail - echo "Check if image exists on registry" - docker pull ${IMAGE_NAME}:${VERSION} || true - docker images | grep "${IMAGE_BASE}" - - echo "IMAGE_NAME=${REGISTRY_HOST}/${IMAGE_BASE}" - echo "VERSION=${VERSION}" - IMAGE_TO_SIGN="${REGISTRY_HOST}/${IMAGE_BASE}:${VERSION}" echo "Signing image $IMAGE_TO_SIGN" - cosign sign --key ${{ secrets.COSIGN_KEY }} "$IMAGE_TO_SIGN" + + # Cosign login falls nötig + export COSIGN_PASSWORD="${{ secrets.COSIGN_KEY }}" + + cosign sign --key <(echo "$COSIGN_PASSWORD") "$IMAGE_TO_SIGN" +