Add signing of binaries

Signed-off-by: Marco Franssen <marco.franssen@philips.com>
philips-labs · Jan 14, 2022 · 885106c · 885106c
1 parent fae521a
commit 885106c
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -77,6 +77,19 @@ signs:
       - '--output-certificate=${certificate}'
       - '--output-signature=${signature}'
       - '${artifact}'
+  - id: binaries
+    cmd: cosign
+    stdin: '{{ .Env.COSIGN_PASSWORD }}'
+    certificate: '{{ trimsuffix .Env.artifact ".tar.gz" }}.pem'
+    output: true
+    artifacts: binary
+    args:
+      - sign-blob
+      - --key
+      - cosign.key
+      - '--output-certificate=${certificate}'
+      - '--output-signature=${signature}'
+      - '${artifact}'
   - id: archives
     cmd: cosign
     stdin: '{{ .Env.COSIGN_PASSWORD }}'