From cdd7e97c47fefe2ffdddf6fd2b600122c9dd439d Mon Sep 17 00:00:00 2001
From: Aqua Security automated builds
 <54269356+aqua-bot@users.noreply.github.com>
Date: Wed, 3 Dec 2025 12:22:19 +0200
Subject: [PATCH] fix: update cosing settings for GoReleaser after bumping
 cosing to v3 [backport: release/v0.68] (#9870)

Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
---
 goreleaser.yml | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/goreleaser.yml b/goreleaser.yml
index b61977237f..bc8346f07e 100644
--- a/goreleaser.yml
+++ b/goreleaser.yml
@@ -293,13 +293,10 @@ signs:
 - cmd: cosign
   env:
   - COSIGN_EXPERIMENTAL=1
-  signature: "${artifact}.sig"
-  certificate: "${artifact}.pem"
+  signature: "${artifact}.sigstore.json"
   args:
     - "sign-blob"
-    - "--oidc-issuer=https://token.actions.githubusercontent.com"
-    - "--output-certificate=${certificate}"
-    - "--output-signature=${signature}"
+    - "--bundle=${signature}"
     - "${artifact}"
     - "--yes"
   artifacts: all