Marc Schäfer a69cda5c13 ci(actions): add GHCR mirroring and cosign signing for Docker images ...

- mirror images from Docker Hub to GHCR using skopeo (preserves multi-arch manifests)
- login to GHCR via docker/login-action for signing/pushing
- install cosign and perform dual signing: keyless (OIDC) + key-based; verify signatures
- add required permissions for id-token/packages and reference necessary secrets

2025-10-20 17:16:40 -07:00

..

cicd.yml

ci(actions): add GHCR mirroring and cosign signing for Docker images

2025-10-20 17:16:40 -07:00

linting.yml

ci(actions): add permissions section to workflows

2025-10-20 17:16:40 -07:00

mirror.yaml

feat(actions): Sync Images from Docker to GHCR

2025-10-20 17:16:40 -07:00

stale-bot.yml

ci(actions): pin action versions to commit SHAs for security

2025-10-20 17:16:40 -07:00

test.yml

ci(actions): add permissions section to workflows

2025-10-20 17:16:40 -07:00