From 451d598ee733055ea2dea9a18d1b22b5a42d6ee1 Mon Sep 17 00:00:00 2001 From: DSR! Date: Tue, 20 May 2025 14:47:40 -0300 Subject: [PATCH] Fixes in sign code --- .github/workflows/sign.yml | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/.github/workflows/sign.yml b/.github/workflows/sign.yml index e0c7388..91c170b 100644 --- a/.github/workflows/sign.yml +++ b/.github/workflows/sign.yml @@ -79,7 +79,8 @@ jobs: for exe in artifacts/*.exe; do ./cosign sign-blob --yes \ --identity-token "${{ steps.oidc.outputs.result }}" \ - --signature "${exe}.sig" \ + --bundle "${exe}.bundle" \ + --output-signature "${exe}.sig" \ "$exe" done @@ -87,9 +88,7 @@ jobs: run: | for exe in artifacts/*.exe; do ./cosign verify-blob \ - --certificate-identity-regexp "https://github\\.com/${{ github.repository }}/.*" \ - --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ - --signature "${exe}.sig" \ + --bundle "${exe}.bundle" \ "$exe" done