From 66bd0092d26ea4fe3d2a0e52fcf1053b5e48a4bb Mon Sep 17 00:00:00 2001
From: Lukasz Raczylo <lukasz@raczylo.com>
Date: Sat, 7 Mar 2026 18:40:15 +0000
Subject: [PATCH] Fix cosign signing artifact path in goreleaser config

---
 .goreleaser.yaml | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 10c231e..61aed3b 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -57,11 +57,10 @@ signs:
     args:
       - "sign-blob"
       - "--yes"
-      - "${artifact}"
-      - "--output-certificate"
-      - "${signature}.pem"
       - "--bundle"
-      - "${signature}.sigstore.json"
+      - "${signature}"
+      - "${artifact}"
+    signature: "checksums.txt.sigstore.json"
 
 docker_signs:
   - cmd: cosign