forgejo-mcp/.sops.yaml at renovate/lock-file-maintenance - giovannino/forgejo-mcp - Cervello Elettrico: Digital Empowerment

giovannino/forgejo-mcp

Christoph Görn d3fcc3d2eb

ci: 🔒️ provision cosign signing material for release pipeline

- secrets/cosign-signing-key.enc.yaml: SOPS-encrypted k8s Secret
  (cosign.key + cosign.password) produced by ci/cosign-keygen.sh
- secrets/cosign.pub: ECDSA P-256 public verification key
- .sops.yaml: encryption policy (data/stringData/tls, two PGP recipients)
- Mirrored COSIGN_PRIVATE_KEY + COSIGN_PASSWORD to Codeberg
  Actions repo secrets via Forgejo API (one-way sync from SOPS)
- .beads/issues.jsonl: tracking bead forgejo-mcp-phn (closed)

2026-05-24 13:12:24 +02:00

3 lines

157 B

YAML

Raw Permalink Blame History

	`creation_rules:`
	`- encrypted_regex: '^(data\|stringData\|tls)$'`
	`pgp: "04DAFCD9470A962A2F272984E5EB0DA32F3372AC, 8A07D816280A983BBC35E85C280DB66A3E8C012E"`