From 7032bb5bee0140b59caa3ff4e40597ff54c2c2ab Mon Sep 17 00:00:00 2001
From: Lukasz Raczylo <lukasz@raczylo.com>
Date: Sun, 14 Dec 2025 23:29:27 +0000
Subject: [PATCH] Add artifacts signing.

---
 .goreleaser.yaml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 31dc958..f16678c 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -71,3 +71,21 @@ homebrew_casks:
             system_command "/usr/bin/xattr",
                            args: ["-dr", "com.apple.quarantine", "#{staged_path}/kportal"]
           end
+
+signs:
+  - cmd: cosign
+    env:
+      - COSIGN_PASSWORD={{ .Env.COSIGN_PASSWORD }}
+    certificate: "${artifact}.pem"
+    args:
+      - sign-blob
+      - "--key"
+      - "env://COSIGN_KEY"
+      - "--output-signature"
+      - "${signature}"
+      - "--output-certificate"
+      - "${certificate}"
+      - "${artifact}"
+      - "--yes"
+    artifacts: checksum
+    output: true