- secrets/cosign-signing-key.enc.yaml: SOPS-encrypted k8s Secret (cosign.key + cosign.password) produced by ci/cosign-keygen.sh - secrets/cosign.pub: ECDSA P-256 public verification key - .sops.yaml: encryption policy (data/stringData/tls, two PGP recipients) - Mirrored COSIGN_PRIVATE_KEY + COSIGN_PASSWORD to Codeberg Actions repo secrets via Forgejo API (one-way sync from SOPS) - .beads/issues.jsonl: tracking bead forgejo-mcp-phn (closed) |
||
|---|---|---|
| .. | ||
| .gitkeep | ||
| cosign-signing-key.enc.yaml | ||
| cosign.pub | ||