Update .goreleaser.yaml - cosign

Signed-off-by: Mathieu Benoit <mathieu-benoit@hotmail.fr>
score-spec · Nov 21, 2024 · 8b65eee · 8b65eee
1 parent c39293e
commit 8b65eee
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
@@ -41,3 +41,16 @@ brews:
     commit_author:
       name: rachfop
       email: prachford@icloud.com
+signs:
+  - cmd: cosign
+    signature: "${artifact}.sig"
+    certificate: "${artifact}.pem"
+    args:
+      - sign-blob
+      - '--oidc-provider=github-actions'
+      - '--output-certificate=${certificate}' 
+      - '--output-signature=${signature}'
+      - '${artifact}'
+      - --yes
+    artifacts: all
+    output: true