From d5c7f99098abc8a586ddef075dac7ad5fd9531a4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Maciej=20Kara=C5=9B?= <maciej.karas@mongodb.com>
Date: Thu, 30 Oct 2025 13:08:13 +0100
Subject: [PATCH] Enable mistakenly disabled image signing + conform to new
 cosign version

---
 scripts/release/build/image_signing.py | 2 ++
 scripts/release/pipeline.py            | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/scripts/release/build/image_signing.py b/scripts/release/build/image_signing.py
index 6bca81db7..c9f4be227 100644
--- a/scripts/release/build/image_signing.py
+++ b/scripts/release/build/image_signing.py
@@ -195,6 +195,8 @@ def sign_image(repository: str, tag: str) -> None:
         "sign",
         f"--key={pkcs11_uri}",
         f"--sign-container-identity={image}",
+        f"--use-signing-config=false",
+        f"--new-bundle-format=false",
         f"--tlog-upload=false",
         image_ref,
     ]
diff --git a/scripts/release/pipeline.py b/scripts/release/pipeline.py
index 3af1bb164..25a7e9e42 100644
--- a/scripts/release/pipeline.py
+++ b/scripts/release/pipeline.py
@@ -241,7 +241,7 @@ def main():
     parser.add_argument(
         "-s",
         "--sign",
-        action="store_true",
+        action=argparse.BooleanOptionalAction,
         help="If set force image signing. Default is to infer from build scenario.",
     )
     parser.add_argument(