mirror of
https://github.com/fosrl/newt.git
synced 2026-08-22 12:12:25 -05:00
mirror images from Docker Hub to GHCR using skopeo (preserves multi-arch manifests) login to GHCR via docker/login-action for signing/pushing install cosign and perform dual signing: keyless (OIDC) + key-based; verify signatures add required permissions for id-token/packages and reference necessary secrets Former-commit-id: e07439a3666b5de8f36cd69581fd50c9fe632ed2