From 18dad87a0e13a7464eb1c4d5f704ec163d7f21b0 Mon Sep 17 00:00:00 2001
From: Matthias Glastra <matglas.git@gmail.com>
Date: Fri, 11 Oct 2024 16:39:33 +0200
Subject: [PATCH] Add pem as output of goreleaser sign for verification. (#508)

Signed-off-by: Matthias Glastra <matglas.git@gmail.com>
---
 .goreleaser.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 4c79c450..e0f21b3e 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -23,9 +23,12 @@ source:
   enabled: true
 signs:
   - cmd: cosign
+    certificate: '${artifact}.pem'
+    signature: '${artifact}.sig'
     args:
       - "sign-blob"
       - "--output-signature=${signature}"
+      - '--output-certificate=${certificate}'
       - "${artifact}"
       - "--yes" # needed on cosign 2.0.0+
     artifacts: all