Marc Schäfer 6cde07d479 ci(actions): add GHCR mirroring and cosign signing for Docker images ...

- mirror images from Docker Hub to GHCR using skopeo (preserves multi-arch manifests)
- login to GHCR via docker/login-action for signing/pushing
- install cosign and perform dual signing: keyless (OIDC) + key-based; verify signatures
- add required permissions for id-token/packages and reference necessary secrets

2025-10-21 01:30:51 +02:00

5.5 KiB

Raw Blame History

View Raw