chore(ci): Output signature from cosign (#2089)

GoReleaser is hard-coded to look for a `.sig` file for each artifact. Signed-off-by: Charith Ellawala <charith@cerbos.dev> Signed-off-by: Charith Ellawala <charith@cerbos.dev>
cerbos · Apr 9, 2024 · e5b322b · e5b322b
1 parent 4c9c159
commit e5b322b
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -1,6 +1,7 @@
 ---
 name: Release
 on:
+  workflow_dispatch:
   push:
     tags:
       - v*

diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -117,6 +117,7 @@ signs:
       - --rekor-url
       - https://rekor.sigstore.dev/
       - "--bundle=${artifact}.bundle"
+      - "--output-signature=${signature}"
       - "${artifact}"
     artifacts: all
 
@@ -302,6 +303,8 @@ brews:
 checksum:
   name_template: 'checksums.txt'
 release:
+  extra_files:
+    - glob: '**/*.bundle'
   header: |-
     Cerbos {{ .Version }}
     ---------------------