update .goreleaser.yaml

.github/workflows/go-releaser.yml

@@ -22,6 +22,7 @@ jobs:
         with:
           go-version: 1.21
           cache: true
+      - uses: sigstore/[email protected]
       - uses: goreleaser/goreleaser-action@v4
         with:
           distribution: goreleaser

.goreleaser.yaml

@@ -123,6 +123,28 @@ brews:
 #          owner: microsoft
 #          name: winget-pkgs
 #          branch: master
+sboms:
+  - artifacts: archive
+
+signs:
+  - cmd: cosign
+    certificate: "${artifact}.pem"
+    output: true
+    artifacts: checksum
+    args:
+      - sign-blob
+      - "--output-certificate=${certificate}"
+      - "--output-signature=${signature}"
+      - "${artifact}"
+      - --yes
+docker_signs:
+  - cmd: cosign
+    artifacts: manifests
+    output: true
+    args:
+      - "sign"
+      - "${artifact}@${digest}"
+      - --yes
 
 release:
   name_template: "v{{ .Version }}"