diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b001b9dc..80efb10e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -24,8 +24,6 @@ jobs: uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version-file: 'go.mod' - - name: Install Cosign - uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0 - name: Run GoReleaser uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0 with: diff --git a/.goreleaser.yml b/.goreleaser.yml index 3c828d09..f2bbc59b 100644 --- a/.goreleaser.yml +++ b/.goreleaser.yml @@ -28,18 +28,6 @@ checksum: name_template: 'checksums.txt' extra_files: - glob: ./dist/raw/* -signs: - - cmd: cosign - signature: '${artifact}.keyless.sig' - certificate: '${artifact}.pem' - output: true - artifacts: checksum - args: - - sign-blob - - '--output-certificate=${certificate}' - - '--output-signature=${signature}' - - '${artifact}' - - --yes release: github: draft: true