From 6217086cd595a3e05a209f973c030b47ed4011e1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc=20Sch=C3=A4fer?= <git@marcschaeferger.de>
Date: Fri, 5 Dec 2025 15:54:59 +0100
Subject: [PATCH] Add login step for GitHub Container Registry

Added GitHub Container Registry login step for cosign.
---
 .github/workflows/cicd.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/cicd.yml b/.github/workflows/cicd.yml
index 710c5c86..0587bb81 100644
--- a/.github/workflows/cicd.yml
+++ b/.github/workflows/cicd.yml
@@ -135,6 +135,13 @@ jobs:
                     docker://$DOCKERHUB_IMAGE:$TAG \
                     docker://$GHCR_IMAGE:$TAG
               shell: bash
+  
+            - name: Login to GitHub Container Registry (for cosign)
+              uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
+              with:
+                registry: ghcr.io
+                username: ${{ github.actor }}
+                password: ${{ secrets.GITHUB_TOKEN }}
 
             - name: Install cosign
               # cosign is used to sign and verify container images (key and keyless)