Fix uploading cosign signature for source code (#409)

stackrox · Sep 16, 2022 · 5b90391 · 5b90391
1 parent 1981f79
commit 5b90391
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -331,6 +331,9 @@ jobs:
              fi
              cosign sign-blob --key cosign.key --output-file "${bin_name}.sig" "${os}/${bin_name}"
            done
+          for f in *.{gz,zip}; do \
+            cosign sign-blob --key cosign.key --output-file "${f}.sig" "${f}"; \
+          done
 
       - uses: release-drafter/release-drafter@v5
         id: release_drafter