cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README
commit f918b48ba4bcb87e2300d09e4e1e47046d399aa4
parent 0422db7b1a0f7f0f1183fa6279c9c4496167efc2
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Wed, 25 Mar 2026 21:17:36 +0100

try to sign correctly

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:

M.github/workflows/build-blog.yaml | 6+-----


M.github/workflows/build-continuwuity.yaml | 6+-----


2 files changed, 2 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/build-blog.yaml b/.github/workflows/build-blog.yaml
@@ -36,7 +36,7 @@ jobs:
           password: ${{ secrets.REGISTRY_PASSWORD }}
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
+        uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
 
       - name: Extract metadata
         id: meta
@@ -66,11 +66,7 @@ jobs:
           COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
           COSIGN_OCI_EXPERIMENTAL: "1"
           COSIGN_EXPERIMENTAL: "1"
-          DIGEST: ${{ steps.build.outputs.digest }}
         run: |
           cosign sign --yes --key env://COSIGN_PRIVATE_KEY \
             --registry-referrers-mode=oci-1-1 \
             registry.midnightthoughts.space/mtrnord/blog:latest
-          cosign sign --yes --key env://COSIGN_PRIVATE_KEY \
-            --registry-referrers-mode=oci-1-1 \
-            registry.midnightthoughts.space/mtrnord/blog@${DIGEST}
diff --git a/.github/workflows/build-continuwuity.yaml b/.github/workflows/build-continuwuity.yaml
@@ -48,7 +48,7 @@ jobs:
             type=sha,prefix=sha-
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
+        uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
 
       - name: Build and push
         id: build
@@ -69,11 +69,7 @@ jobs:
           COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
           COSIGN_OCI_EXPERIMENTAL: "1"
           COSIGN_EXPERIMENTAL: "1"
-          DIGEST: ${{ steps.build.outputs.digest }}
         run: |
           cosign sign --yes --key env://COSIGN_PRIVATE_KEY \
             --registry-referrers-mode=oci-1-1 \
             registry.midnightthoughts.space/mtrnord/cluster/continuwuity:main
-          cosign sign --yes --key env://COSIGN_PRIVATE_KEY \
-            --registry-referrers-mode=oci-1-1 \
-            registry.midnightthoughts.space/mtrnord/cluster/continuwuity@${DIGEST}