veilor-os/.github/workflows
claude-veilor-bot 17c678e515
Some checks failed
Build veilor-os OCI (BlueBuild) / Build + push OCI (push) Failing after 3m18s
ci(bluebuild): add cosign keypair signing infra
Generated a cosign keypair for v0.7 OCI signing.
- bluebuild/cosign.pub committed alongside the recipe
- cosign.key stored on operator workstation only (chmod 600)
- COSIGN_PRIVATE_KEY Forgejo Actions secret set to the same key
- Workflow stages the secret to bluebuild/cosign.key at build time
  (chmod 600), where the BlueBuild signing module picks it up
- .gitignore guards against any cosign.key accidental commit
- Restored the type:signing module in recipe.yml

The 'stage-keys' COPY step in BlueBuild's generated containerfile
fails without cosign.pub adjacent to recipe.yml even when
type:signing is removed; re-add the module + provide real keys.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-06 17:48:58 +01:00
..
build-bluebuild.yml ci(bluebuild): add cosign keypair signing infra 2026-05-06 17:48:58 +01:00
build-iso.yml ci: gate cosign/sbom/attest steps to github only 2026-05-06 16:10:03 +01:00
lint.yml ci(bluebuild): pin actions to node20-safe tags 2026-05-06 13:54:12 +01:00