release: 1.2.0

.gitea/workflows/docker-builder.yml

@@ -187,7 +187,10 @@ jobs:
             exit 1
           fi
 
-          # amd64 build
+          # Cache-Definitionen für bessere Übersicht
+          CACHE_REF="${REGISTRY_HOST}/${IMAGE_BASE}-cache"
+
+          # amd64 build mit Registry-Cache (mode=min für weniger Fragmente)
           docker buildx build \
             --platform linux/amd64 \
             -f ${AMD64_DOCKERFILE} \
@@ -195,10 +198,12 @@ jobs:
             --build-arg APP_VERSION="$APP_VERSION" \
             --label org.opencontainers.image.version="$APP_VERSION" \
             --label org.opencontainers.image.created="$BUILD_DATE" \
+            --cache-from type=registry,ref=${CACHE_REF}:amd64 \
+            --cache-to type=registry,ref=${CACHE_REF}:amd64,mode=min \
             -t ${CACHE_IMAGE_NAME}:${VERSION}-amd64 \
             --push .
 
-          # arm64 build
+          # arm64 build mit Registry-Cache (mode=min für weniger Fragmente)
           docker buildx build \
             --platform linux/arm64 \
             -f ${ARM64_DOCKERFILE} \
@@ -206,10 +211,14 @@ jobs:
             --build-arg APP_VERSION="$APP_VERSION" \
             --label org.opencontainers.image.version="$APP_VERSION" \
             --label org.opencontainers.image.created="$BUILD_DATE" \
+            --cache-from type=registry,ref=${CACHE_REF}:arm64 \
+            --cache-to type=registry,ref=${CACHE_REF}:arm64,mode=min \
             -t ${CACHE_IMAGE_NAME}:${VERSION}-arm64 \
             --push .
 
+          # Manifest-Erstellung (verbindet die Architekturen zu den finalen Tags)
           for TAG in $(echo $DOCKER_TAGS | tr ',' ' '); do
+            echo "Creating manifest for tag: $TAG"
             docker buildx imagetools create -t $TAG \
               ${CACHE_IMAGE_NAME}:${VERSION}-amd64 \
               ${CACHE_IMAGE_NAME}:${VERSION}-arm64
@@ -217,8 +226,6 @@ jobs:
 
           echo "== Multiarch Build Complete =="
 
-
-
       - name: Install syft
         run: |
           curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh \
@@ -240,32 +247,4 @@ jobs:
         uses: actions/upload-artifact@v3
         with:
           name: sbom
-          path: sbom.spdx.json
+          path: sbom.spdx.json
-          
-      - name: Install cosign
-        shell: bash
-        run: |
-          curl -sSfL https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64 \
-            -o cosign
-          chmod +x cosign
-          mv cosign /usr/local/bin/
-          cosign version
-
-      - name: Sign image
-        shell: bash
-        env:
-          COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
-          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
-          # Diese Variable ist der wichtigste Hebel:
-          COSIGN_SKIP_REKOR_UPLOAD: "true"
-          COSIGN_REPOSITORY: ${{ env.REGISTRY_HOST }}/${{ env.IMAGE_BASE }}/signatures
-        run: |
-          echo "$COSIGN_PRIVATE_KEY" > cosign.key
-          
-          # Wir lassen NUR NOCH die absolut notwendigen Flags stehen.
-          # Keine Erwähnung von tlog oder configs mehr.
-          cosign sign --yes --key cosign.key \
-            --registry-referrers-mode legacy \
-            "${REGISTRY_HOST}/${IMAGE_BASE}:main"
-
-          rm -f cosign.key

CHANGELOG.md

@@ -1,3 +1,67 @@
+## 1.2.0 - 2026-02-10
+- changed build workflow
+## 1.1.0 - 2026-02-10
+- fix indentation
+- remove signing in workflow
+- release: 1.1.0
+- neuer fix
+- fix signature-tags
+- release: 1.2.0
+- fix signature-tags
+- release: 1.1.0
+- fix
+- fix
+- fix cosign
+- new cosign fix
+- fix cosign
+- cosign experimental=1
+- fix cosign sha256-tags
+- release: 1.1.0
+- fix sign error
+- release: 1.1.0
+- fix cosign failure
+- release: 1.1.0
+- fix sign key
+- release: 1.1.0
+- fix cosign key
+- release: 1.1.0
+- fix sign step
+- fix again
+- release: 1.1.0
+- fix signing step
+- release: 1.1.0
+- fix signing
+- release: 1.1.0
+- fix signing
+- release: 1.1.0
+- fix sign-step
+- release: 1.1.0
+- fix sign-step for version-tags
+- release: 1.3.0
+- fix SBOM
+- siplify workflow
+- release: 1.1.0
+- fix release.sh
+- release: 1.2.0
+- rebuild release.sh
+- make release.sh executable
+- remove Dockerfile.aarch64
+- fix signing
+- fix SBOM
+- reorder Dockerfile
+- add multi-watch.sh
+- another fix
+- rebuild workflow
+- new fix
+- fix workflow
+- fix workflow
+- fix workflow
+- set shell to bash in workflow
+- changed workflow for use build-args from versions.env in buildx builder
+- changed relevant files for project test2
+- docs: fix template placeholders [skip ci]
+- versions.env aktualisiert
+- Initial commit
 ## 1.1.0 - 2026-02-10
 - neuer fix
 - fix signature-tags

versions.env

@@ -1,5 +1,5 @@
 APP_NAME=test2
-APP_VERSION=1.1.0
+APP_VERSION=1.2.0
 APP_DESCRIPTION=Watchdog for notify on updates on dockerhub, github and other git-sources
 
 BASE_IMAGE=alpine:3.22