specify oidc-issuer

Signed-off-by: Juraci Paixão Kröhling <juraci@kroehling.de>
jpkrohling · Nov 29, 2023 · 5686dd2 · 5686dd2
1 parent 2f45e2f
commit 5686dd2
Show file tree

Hide file tree

Showing 3 changed files with 40 additions and 6 deletions.
diff --git a/distributions/sidecar/.goreleaser.yaml b/distributions/sidecar/.goreleaser.yaml
@@ -1,4 +1,6 @@
 project_name: sidecar
+env:
+    - COSIGN_YES=true
 builds:
     - id: sidecar
       goos:
@@ -132,9 +134,23 @@ signs:
     - cmd: cosign
       args:
         - sign-blob
-        - --oidc-issuer=https://token.actions.githubusercontent.com
-        - --output-signature=${signature}
+        - --output-signature
+        - ${artifact}.sig
+        - --output-certificate
+        - ${artifact}.pem
+        - --certificate-oidc-issuer
+        - https://token.actions.githubusercontent.com
+        - ${artifact}
+      signature: ${artifact}.sig
+      artifacts: all
+      certificate: ${artifact}.pem
+docker_signs:
+    - args:
+        - sign
         - ${artifact}
       artifacts: all
 sboms:
-    - artifacts: archive
+    - id: archive
+      artifacts: archive
+    - id: package
+      artifacts: package
diff --git a/distributions/tracing/.goreleaser.yaml b/distributions/tracing/.goreleaser.yaml
@@ -1,4 +1,6 @@
 project_name: tracing
+env:
+    - COSIGN_YES=true
 builds:
     - id: tracing
       goos:
@@ -132,9 +134,23 @@ signs:
     - cmd: cosign
       args:
         - sign-blob
-        - --oidc-issuer=https://token.actions.githubusercontent.com
-        - --output-signature=${signature}
+        - --output-signature
+        - ${artifact}.sig
+        - --output-certificate
+        - ${artifact}.pem
+        - --certificate-oidc-issuer
+        - https://token.actions.githubusercontent.com
+        - ${artifact}
+      signature: ${artifact}.sig
+      artifacts: all
+      certificate: ${artifact}.pem
+docker_signs:
+    - args:
+        - sign
         - ${artifact}
       artifacts: all
 sboms:
-    - artifacts: archive
+    - id: archive
+      artifacts: archive
+    - id: package
+      artifacts: package
diff --git a/goreleaser/main.go b/goreleaser/main.go
@@ -74,6 +74,8 @@ func Generate(imagePrefixes []string, dist string) config.Project {
 					"${artifact}.sig",
 					"--output-certificate",
 					"${artifact}.pem",
+					"--certificate-oidc-issuer",
+					"https://token.actions.githubusercontent.com",
 					"${artifact}",
 				},
 			},