forgejo-mcp/secrets
Christoph Görn d3fcc3d2eb
ci: 🔒️ provision cosign signing material for release pipeline
- secrets/cosign-signing-key.enc.yaml: SOPS-encrypted k8s Secret
  (cosign.key + cosign.password) produced by ci/cosign-keygen.sh
- secrets/cosign.pub: ECDSA P-256 public verification key
- .sops.yaml: encryption policy (data/stringData/tls, two PGP recipients)
- Mirrored COSIGN_PRIVATE_KEY + COSIGN_PASSWORD to Codeberg
  Actions repo secrets via Forgejo API (one-way sync from SOPS)
- .beads/issues.jsonl: tracking bead forgejo-mcp-phn (closed)
2026-05-24 13:12:24 +02:00
..
.gitkeep ci: 🔒️ add cosign-keygen.sh producing SOPS-encrypted k8s Secret 2026-05-24 12:43:03 +02:00
cosign-signing-key.enc.yaml ci: 🔒️ provision cosign signing material for release pipeline 2026-05-24 13:12:24 +02:00
cosign.pub ci: 🔒️ provision cosign signing material for release pipeline 2026-05-24 13:12:24 +02:00