you mean the final image that gets published to ghcr *wont* be smaller?
you mean the final image that gets published to ghcr wont be smaller?
I've replaced my cosign.pub and pasted the private key under Secrets > Repository secretes, under the variables SIGNING_SECRET and COSIGN_PRIVATE_KEY. Should I be using Variables instead? As I understand, Variables are plain-text and should't be used for secrets, so not sure where I'm going wrong.
SIGNING_SECRETCOSIGN_PRIVATE_KEYSIGNING_SECRET with cosign.key and try again?

bazzite:latestSIGNING_SECRETSIGNING_SECRETCOSIGN_PRIVATE_KEYbazzite:latest