Marc Schäfer e07439a366 ci(actions): add GHCR mirroring and cosign signing for Docker images ...

mirror images from Docker Hub to GHCR using skopeo (preserves multi-arch manifests)
login to GHCR via docker/login-action for signing/pushing
install cosign and perform dual signing: keyless (OIDC) + key-based; verify signatures
add required permissions for id-token/packages and reference necessary secrets

2025-10-21 00:06:27 +02:00

5.5 KiB

Raw Blame History

View Raw