.goreleaser.yml 🔗
@@ -235,11 +235,10 @@ nfpms:
signs:
- cmd: cosign
- certificate: "${artifact}.pem"
+ signature: "${artifact}.sigstore.json"
args:
- sign-blob
- - "--output-certificate=${certificate}"
- - "--output-signature=${signature}"
+ - "--bundle=${signature}"
- "${artifact}"
- "--yes"
artifacts: checksum