obsidian-ai c152953089 ci(bluebuild): add cosign keypair signing infra ... Generated a cosign keypair for v0.7 OCI signing. - bluebuild/cosign.pub committed alongside the recipe - cosign.key stored on operator workstation only (chmod 600) - COSIGN_PRIVATE_KEY Forgejo Actions secret set to the same key - Workflow stages the secret to bluebuild/cosign.key at build time (chmod 600), where the BlueBuild signing module picks it up - .gitignore guards against any cosign.key accidental commit - Restored the type:signing module in recipe.yml The 'stage-keys' COPY step in BlueBuild's generated containerfile fails without cosign.pub adjacent to recipe.yml even when type:signing is removed; re-add the module + provide real keys.		2026-05-06 17:48:58 +01:00
..
workflows	ci(bluebuild): add cosign keypair signing infra	2026-05-06 17:48:58 +01:00
CODEOWNERS	ci: switch refs from veilor → veilor-org (GH org slug); domain veilor.org	2026-04-30 13:59:20 +01:00
PULL_REQUEST_TEMPLATE.md	ci: github actions workflow (build-iso + lint), CONTRIBUTING, CODEOWNERS, PR template	2026-04-30 13:56:03 +01:00