Is this possible to sign images built with ko ?

[eddycharly]

We use goreleaser with ko and tried to sign images with cosign but it looks like cosign sees nothing to sign.

GitHub logs:

    ....
    • signing docker images
      • no artifacts matching the given filters found
    ....

Our goreleaser config:

kos:
  - repository: ghcr.io/kyverno/playground
    tags:
      - '{{.Tag}}'
    bare: true
    preserve_import_paths: false
    sbom: none
    platforms:
      - all
    ldflags:
      - -s -w

docker_signs:
  - artifacts: all
    args:
      - 'sign'
      - '${artifact}'
      - "--yes"

[caarlos0]

hmmm, this might be a bug... will convert this to an issue.

thanks for reporting

[caarlos0]

#4027

[eddycharly]

Thanks, will keep an eye on this !