Merge branch 'main' into dev/10152

Author: gbartolini

.github/workflows/update-catalogs.yml

@@ -16,7 +16,10 @@ defaults:
 
 jobs:
   update-catalogs:
+    name: Updating catalogs
     runs-on: ubuntu-24.04
+    permissions:
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
@@ -41,7 +44,17 @@ jobs:
           version: ${{ env.DAGGER_VERSION }}
           verb: call
           module: ./dagger/maintenance/
-          args: generate-catalogs --catalogs-dir artifacts/image-catalogs/ export --path artifacts/image-catalogs/
+          args: generate-catalogs --catalogs-dir artifacts/image-catalogs/ export --path artifacts/image-catalogs-extensions/
+
+      - name: Install cosign
+        uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3
+
+      - name: Sign catalogs
+        run: |
+          for file in artifacts/image-catalogs-extensions/*.yaml; do
+              echo "Signing $file..."
+              cosign sign-blob "$file" --bundle "$file.sigstore.json" --yes
+          done
 
       - name: Diff
         working-directory: artifacts
@@ -54,7 +67,7 @@ jobs:
         if: github.ref == 'refs/heads/main'
         with:
           cwd: 'artifacts'
-          add: 'image-catalogs'
+          add: 'image-catalogs-extensions'
           author_name: CloudNativePG Automated Updates
           author_email: noreply@cnpg.com
           message: 'chore: update extensions imageCatalogs'

README.md

@@ -176,7 +176,7 @@ list of compatible extension images for PostgreSQL 18+ versions.
 
 - **Frequency:** Built once a week.
 - **Location:** Published in the [`artifacts`
-  project](https://github.com/cloudnative-pg/artifacts/tree/main/image-catalogs).
+  project](https://github.com/cloudnative-pg/artifacts/tree/main/image-catalogs-extensions).
 - **Naming Convention:** These are based on the `minimal` catalog and use the
-  `catalog-extensions` prefix (e.g., `catalog-extensions-trixie.yaml`).
+  `catalog-minimal` prefix (e.g., `catalog-minimal-trixie.yaml`).
 

dagger/maintenance/catalogs.go

@@ -107,7 +107,7 @@ func writeCatalogToDir(catalog *ImageCatalog, outDir *dagger.Directory) (*dagger
 		return nil, err
 	}
 
-	outName := fmt.Sprintf("catalog-extensions-%s.yaml", catalog.Metadata.Labels[LabelImageOS])
+	outName := fmt.Sprintf("catalog-minimal-%s.yaml", catalog.Metadata.Labels[LabelImageOS])
 
 	return outDir.WithNewFile(outName, buf.String()), nil
 }