diff --git a/.drone.yml b/.drone.yml index 0f6373d..75858dc 100644 --- a/.drone.yml +++ b/.drone.yml @@ -76,12 +76,13 @@ steps: - curl -sSL -o /usr/local/bin/cosign https://github.com/sigstore/cosign/releases/download/v3.0.2/cosign-linux-amd64 - chmod +x /usr/local/bin/cosign - cosign version - + - echo "=== 🔐 Logging in to registry for signing ===" - cosign version - echo "$DOCKER_PASS" | cosign login --username "$DOCKER_USER" --password-stdin "$REGISTRY_URL" - echo "=== 🔏 Signing Image ===" + - cosign sign --yes --key env://COSIGN_KEY "$IMAGE_DIGEST" - echo "✅ Image signed successfully." depends_on: @@ -90,32 +91,32 @@ steps: # -------------------------------------------------- # 3️⃣ Create Gitea Release # -------------------------------------------------- - - name: create-release - image: curlimages/curl:8.10.1 - environment: - GITEA_URL: - from_secret: GITEA_URL - GITEA_TOKEN: - from_secret: GITEA_TOKEN - commands: - - echo "=== 🏷️ Creating Gitea release ===" - - . build.env - - RELEASE_NAME="Release $VERSION_TAG" - - RELEASE_BODY="Automatisch erstellter Release für Build $DRONE_BUILD_NUMBER\n\nImage:\n\`\`\`\n$IMAGE_FULL\n\`\`\`" - - | - curl -s -X POST "$GITEA_URL/api/v1/repos/${DRONE_REPO_OWNER}/${DRONE_REPO_NAME}/releases" \ - -H "Authorization: token $GITEA_TOKEN" \ - -H "Content-Type: application/json" \ - -d "{ - \"tag_name\": \"$VERSION_TAG\", - \"name\": \"$RELEASE_NAME\", - \"body\": \"$RELEASE_BODY\", - \"draft\": false, - \"prerelease\": false - }" - - echo "✅ Release created in Gitea." - depends_on: - - sign-image + - name: create-release + image: curlimages/curl:8.10.1 + environment: + GITEA_URL: + from_secret: GITEA_URL + GITEA_TOKEN: + from_secret: GITEA_TOKEN + commands: + - echo "=== 🏷️ Creating Gitea release ===" + - . build.env + - RELEASE_NAME="Release $VERSION_TAG" + - RELEASE_BODY="Automatisch erstellter Release für Build $DRONE_BUILD_NUMBER\n\nImage:\n\`\`\`\n$IMAGE_FULL\n\`\`\`" + - | + curl -s -X POST "$GITEA_URL/api/v1/repos/${DRONE_REPO_OWNER}/${DRONE_REPO_NAME}/releases" \ + -H "Authorization: token $GITEA_TOKEN" \ + -H "Content-Type: application/json" \ + -d "{ + \"tag_name\": \"$VERSION_TAG\", + \"name\": \"$RELEASE_NAME\", + \"body\": \"$RELEASE_BODY\", + \"draft\": false, + \"prerelease\": false + }" + - echo "✅ Release created in Gitea." + depends_on: + - sign-image volumes: - name: docker_sock