Setup sigstore id token

.gitlab-ci.yml

@@ -3,6 +3,7 @@ stages:
 
 variables:
   COSIGN_PASSWORD: ""
+  COSIGN_YES: "true"
 
 default:
   image: registry.gitlab.com/wunker-bunker/ci-builder
@@ -45,6 +46,9 @@ default:
 
 build:
   stage: build
+  id_tokens:
+    SIGSTORE_ID_TOKEN:
+      aud: sigstore
   parallel:
     matrix:
       - RECIPE:
@@ -58,4 +62,5 @@ build:
         buildah push $FULL_IMAGE_NAME:$TAG
       done
     - DIGEST=($(buildah images --format '{{.Digest}}' $FULL_IMAGE_NAME:$TAGS))
-    - cosign sign -y --key $SIGNING_SECRET $FULL_IMAGE_NAME@$DIGEST
+    - IMAGE_DIGEST=$(docker inspect --format='{{index .RepoDigests 0}}' $FULL_IMAGE_NAME:$TAGS)
+    - cosign sign $IMAGE_DIGEST