diff --git a/.github/workflows/sign.yml b/.github/workflows/sign.yml
index ba7b259..522a9a6 100644
--- a/.github/workflows/sign.yml
+++ b/.github/workflows/sign.yml
@@ -86,7 +86,7 @@ jobs:
         run: |
           for exe in artifacts/*.exe; do
             ./cosign verify-blob \
-              --certificate-identity "https://github.com/${{ github.repository }}" \
+              --certificate-identity-regexp "https://github\\.com/${{ github.repository }}/.*" \
               --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
               --bundle "${exe}.bundle" \
               "$exe"