From 8f52365d535a16c110904a72d08b1d2cbc5acde4 Mon Sep 17 00:00:00 2001
From: Pi-Farm <info@pi-farm.de>
Date: Mon, 9 Feb 2026 18:02:23 +0100
Subject: [PATCH] fix signing

---
 .gitea/workflows/docker-builder.yml | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/docker-builder.yml b/.gitea/workflows/docker-builder.yml
index 3539613..99e41c0 100644
--- a/.gitea/workflows/docker-builder.yml
+++ b/.gitea/workflows/docker-builder.yml
@@ -231,8 +231,16 @@ jobs:
         with:
           name: sbom
           path: sbom.spdx.json
-
+          
+      - name: Install cosign
+        run: |
+          curl -sSfL https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64 \
+            -o /usr/local/bin/cosign
+          chmod +x /usr/local/bin/cosign
       
       - name: Sign image
-        run: cosign sign --key ${{ secrets.COSIGN_KEY }} ${IMAGE_NAME}:v${VERSION}
+        if: env.IS_TAG == 'true'
+        run: |
+          cosign sign --key ${{ secrets.COSIGN_KEY }} ${IMAGE_NAME}:${VERSION}
+