diff --git a/.goreleaser.yml b/.goreleaser.yml index 7a9ffec4c..484b6bb83 100644 --- a/.goreleaser.yml +++ b/.goreleaser.yml @@ -233,8 +233,7 @@ release: ``` cosign verify-blob \ - --certificate ~/Download/step_darwin_{{ .Version }}_amd64.tar.gz.pem \ - --signature ~/Downloads/step_darwin_{{ .Version }}_amd64.tar.gz.sig \ + --bundle ~/Downloads/step_darwin_{{ .Version }}_amd64.tar.gz.sigstore.json \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ ~/Downloads/step_darwin_{{ .Version }}_amd64.tar.gz