Merge pull request #31 from janfuhrer/ci/improve-release-5

ci: only sign checksum file, add certificate artifact
janfuhrer · Apr 24, 2024 · 41c5723 · 41c5723
2 parents 5915e50 + 9c93b4c
commit 41c5723
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -81,15 +81,17 @@ checksum:
   name_template: 'checksums.txt'
   algorithm: sha256
 
-# sign the artifacts
+# sign checksum file (cosign keyless)
 signs:
   - cmd: cosign
     args:
     - "sign-blob"
     - "--output-signature=${signature}"
     - "${artifact}"
+    - "--output-pem=${certificate}"
     - "--yes"
-    artifacts: all
+    artifacts: checksum
+    certificate: '${artifact}.pem'
 
 release:
   # allow pre-release versions (e.g. by tagging with v1.0.0-rc0)

diff --git a/.dockerignore → archive/.dockerignore b/.dockerignore → archive/.dockerignore