发布

  • ci(backend-signing): set COSIGN_EXPERIMENTAL=1 for oci-1-1 referrers mode

    frostbyte_neo 发布于 2026-05-24 08:21:05 +00:00

    cosign v2.4.1 still gates --registry-referrers-mode=oci-1-1 behind the
    experimental flag, so the first signing run after the backend-signing
    merge failed with "you must set COSIGN_EXPERIMENTAL=1". Set it at the
    job env level so both the quay and dockerhub cosign steps inherit it,
    and note the requirement in .agents/backend-signing.md so a future
    cosign bump can drop the flag.

    Signed-off-by: Ettore Di Giacinto mudler@localai.io
    Assisted-by: Claude:claude-opus-4-7 [Claude Code]

    下载附件