From 9c56e08f284f4b3ae91a0feba959e6fee9435a2b Mon Sep 17 00:00:00 2001
From: pi-farm <info@pi-farm.de>
Date: Mon, 9 Feb 2026 20:57:19 +0100
Subject: [PATCH] fix signing

---
 .gitea/workflows/docker-builder.yml | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/.gitea/workflows/docker-builder.yml b/.gitea/workflows/docker-builder.yml
index e4a1cdb..cca7922 100644
--- a/.gitea/workflows/docker-builder.yml
+++ b/.gitea/workflows/docker-builder.yml
@@ -252,11 +252,13 @@ jobs:
         if: env.IS_TAG == 'true'
         shell: bash
         run: |
-          echo "== Signing image =="
+          set -euo pipefail
           IMAGE_NAME="${REGISTRY_HOST}/${IMAGE_BASE}"
-          VERSION="$VERSION"  # kommt vom Detect version Step
-
-          echo "Signing image ${IMAGE_NAME}:${VERSION}"
-          cosign sign --key ${{ secrets.COSIGN_KEY }} "${IMAGE_NAME}:${VERSION}"
+          # Filter nur das erste Tag aus DOCKER_TAGS (falls mehrere)
+          IMAGE_TO_SIGN=$(echo "$DOCKER_TAGS" | cut -d',' -f1)
+          echo "Signing image $IMAGE_TO_SIGN"
+          cosign sign --key ${{ secrets.COSIGN_KEY }} "$IMAGE_TO_SIGN"
+
+