From faf54d7a39cbf39b77acb7c9a339345fe3c65bf7 Mon Sep 17 00:00:00 2001 From: Mariano Cano Date: Thu, 22 Jan 2026 12:10:36 -0800 Subject: [PATCH] Update header with cosign instructions --- .goreleaser.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.goreleaser.yml b/.goreleaser.yml index 7a9ffec4c..484b6bb83 100644 --- a/.goreleaser.yml +++ b/.goreleaser.yml @@ -233,8 +233,7 @@ release: ``` cosign verify-blob \ - --certificate ~/Download/step_darwin_{{ .Version }}_amd64.tar.gz.pem \ - --signature ~/Downloads/step_darwin_{{ .Version }}_amd64.tar.gz.sig \ + --bundle ~/Downloads/step_darwin_{{ .Version }}_amd64.tar.gz.sigstore.json \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ ~/Downloads/step_darwin_{{ .Version }}_amd64.tar.gz