From 1984854ca234ad2f9cafe9c6bd410734285a5c3a Mon Sep 17 00:00:00 2001
From: Mariano Cano <mariano.cano@gmail.com>
Date: Thu, 22 Jan 2026 11:06:03 -0800
Subject: [PATCH] Update cosign command

Update cosign command according to https://goreleaser.com/blog/cosign-v3/
---
 .goreleaser.yml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/.goreleaser.yml b/.goreleaser.yml
index 05f7c633d..7a9ffec4c 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -150,9 +150,12 @@ checksum:
 
 signs:
 - cmd: cosign
-  signature: "${artifact}.sig"
-  certificate: "${artifact}.pem"
-  args: ["sign-blob", "--oidc-issuer=https://token.actions.githubusercontent.com", "--output-certificate=${certificate}", "--output-signature=${signature}", "${artifact}", "--yes"]
+  signature: "${artifact}.sigstore.json"
+  args:
+    - "sign-blob"
+    - "--bundle=${signature}"
+    - "${artifact}"
+    - "--yes"
   artifacts: all
 
 publishers: