Disable for now due some issues when downloading the knative module (#…

…1546) * Disable for now due some issues when downloading the knative module, maybe due to the replace in the go.mod Signed-off-by: cpanato <[email protected]> * sign packages as well Signed-off-by: cpanato <[email protected]>
sigstore · Mar 3, 2022 · 4b2c3c0 · 4b2c3c0
1 parent 9b5f432
commit 4b2c3c0
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -16,8 +16,9 @@ before:
 # this is needed because we are generating files that goreleaser was not aware to push to GH project release
   - /bin/bash -c 'if [ -z "$CI" ]; then make sign-container-release && make sign-keyless-release; fi'
 
-gomod:
-  proxy: true
+# Disable for now due some issues when downloading the knative module, maybe due to the replace in the go.mod
+# gomod:
+#   proxy: true
 
 sboms:
 - artifacts: binary
@@ -231,6 +232,12 @@ signs:
     cmd: ./dist/cosign-linux-amd64
     args: ["sign-blob", "--output-signature", "${artifact}-keyless.sig", "--output-certificate", "${artifact}-keyless.pem", "${artifact}"]
     artifacts: checksum
+  - id: packages-keyless
+    signature: "${artifact}-keyless.sig"
+    certificate: "${artifact}-keyless.pem"
+    cmd: ./dist/cosign-linux-amd64
+    args: ["sign-blob", "--output-signature", "${artifact}-keyless.sig", "--output-certificate", "${artifact}-keyless.pem", "${artifact}"]
+    artifacts: package
 
 nfpms:
   - id: cosign