Marc Schäfer 9b8fbe36e7 ci(actions): add GHCR mirroring and cosign signing for Docker images ...

- mirror images from Docker Hub to GHCR using skopeo (preserves multi-arch manifests)
- login to GHCR via docker/login-action for signing/pushing
- install cosign and perform dual signing: keyless (OIDC) + key-based; verify signatures
- add required permissions for id-token/packages and reference necessary secrets


Former-commit-id: 2a273dc435

2025-10-21 00:22:32 +02:00

..

cicd.yml

ci(actions): add GHCR mirroring and cosign signing for Docker images

2025-10-21 00:22:32 +02:00

mirror.yaml

feat(actions): Sync Images from Docker to GHCR

2025-10-20 21:30:31 +02:00

test.yml

ci(actions): pin action versions to commit SHAs for security

2025-10-21 00:21:28 +02:00