rm cosign

.github/workflows/golang-release.yaml

@@ -3,11 +3,6 @@
 on:
   workflow_call:
     inputs:
-      cosign:
-        required: false
-        type: boolean
-        description: Whether to sign the release with cosign
-        default: false
       docker:
         required: false
         type: boolean
@@ -19,9 +14,8 @@ permissions: {}
 jobs:
   release:
     runs-on: ubuntu-latest
-    if: ${{!inputs.cosign}}
     permissions:
-      contents: write
+      contents: read
       packages: write
     steps:
       - name: "🐳 Logging in to Docker Registry"
@@ -38,29 +32,3 @@ jobs:
           args: release --rm-dist --parallelism=1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-  release-cosign:
-    runs-on: ubuntu-latest
-    if: ${{ inputs.cosign }}
-    permissions:
-      contents: write
-      packages: write
-      id-token: write
-    steps:
-      - name: "🌎 Setup Cosign"
-        uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # v3.3.0
-
-      - name: "🐳 Logging in to Docker Registry"
-        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
-        if: ${{inputs.docker}}
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-      - name: "📦 Release"
-        uses: goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8 # tag=v5.0.0
-        with:
-          version: v1.22.1
-          args: release --rm-dist --parallelism=1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}