diff --git a/.github/workflows/sign.yml b/.github/workflows/sign.yml index 0e2d872..81bd02c 100644 --- a/.github/workflows/sign.yml +++ b/.github/workflows/sign.yml @@ -79,7 +79,6 @@ jobs: for exe in artifacts/*.exe; do ./cosign sign-blob --yes \ --identity-token "${{ steps.oidc.outputs.result }}" \ - --bundle "${exe}.bundle" \ "$exe" done @@ -89,7 +88,7 @@ jobs: ./cosign verify-blob \ --certificate-identity-regexp "https://github\\.com/${{ github.repository }}/.*" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ - --bundle "${exe}.bundle" \ + --signature "${exe}.sig" \ "$exe" done