From 53e2277d64a4a4b9898ec3a5580a3ad25b42f299 Mon Sep 17 00:00:00 2001
From: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
Date: Mon, 1 Dec 2025 19:38:32 -0300
Subject: [PATCH] ci: fix cosign (#1538)

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
---
 .goreleaser.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.goreleaser.yml b/.goreleaser.yml
index 1bfc9202745776736b1483f9e697292d9f90386b..0d628df8946ec7df4a8823570b5cb26250831cd0 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -235,11 +235,10 @@ nfpms:
 
 signs:
   - cmd: cosign
-    certificate: "${artifact}.pem"
+    signature: "${artifact}.sigstore.json"
     args:
       - sign-blob
-      - "--output-certificate=${certificate}"
-      - "--output-signature=${signature}"
+      - "--bundle=${signature}"
       - "${artifact}"
       - "--yes"
     artifacts: checksum