From 0499d9c1c4177503c4a3d8d6bffd5d44e5edd430 Mon Sep 17 00:00:00 2001
From: Mohammed Al Sahaf <msaa1990@gmail.com>
Date: Mon, 5 Sep 2022 23:57:27 +0300
Subject: ci: add `id-token` permission and update the signing command (#5016)

---
 .goreleaser.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.goreleaser.yml')

diff --git a/.goreleaser.yml b/.goreleaser.yml
index d4f786d..d3de2b7 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -68,7 +68,7 @@ builds:
 signs:
   - cmd: cosign
     signature: "${artifact}.sig"
-    args: ["sign-blob", "--oidc-issuer=https://token.actions.githubusercontent.com", "--output=${signature}", "${artifact}"]
+    args: ["sign-blob", "--output-signature=${signature}", "--output-certificate", "${signature}.pem", "${artifact}"]
     artifacts: all
 sboms:
   - artifacts: binary
-- 
cgit v1.2.3