mark keyless pem files with b64

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
sigstore · Feb 24, 2023 · a42f0ea · a42f0ea
1 parent d6b9001
commit a42f0ea
Showing 1 changed file with 8 additions and 8 deletions.
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -179,29 +179,29 @@ signs:
   # Keyless
   - id: cosign-keyless
     signature: "${artifact}-keyless.sig"
-    certificate: "${artifact}-keyless.pem"
+    certificate: "${artifact}-keyless.pem.b64"
     cmd: ./dist/cosign-linux-amd64
-    args: ["sign-blob", "--output-signature", "${artifact}-keyless.sig", "--output-certificate", "${artifact}-keyless.pem", "${artifact}"]
+    args: ["sign-blob", "--output-signature", "${artifact}-keyless.sig", "--output-certificate", "${artifact}-keyless.pem.b64", "${artifact}"]
     artifacts: binary
   - id: sget-keyless
     signature: "${artifact}-keyless.sig"
-    certificate: "${artifact}-keyless.pem"
+    certificate: "${artifact}-keyless.pem.b64"
     cmd: ./dist/cosign-linux-amd64
-    args: ["sign-blob", "--output-signature", "${artifact}-keyless.sig", "--output-certificate", "${artifact}-keyless.pem", "${artifact}"]
+    args: ["sign-blob", "--output-signature", "${artifact}-keyless.sig", "--output-certificate", "${artifact}-keyless.pem.b64", "${artifact}"]
     artifacts: binary
     ids:
       - sget
   - id: checksum-keyless
     signature: "${artifact}-keyless.sig"
-    certificate: "${artifact}-keyless.pem"
+    certificate: "${artifact}-keyless.pem.b64"
     cmd: ./dist/cosign-linux-amd64
-    args: ["sign-blob", "--output-signature", "${artifact}-keyless.sig", "--output-certificate", "${artifact}-keyless.pem", "${artifact}"]
+    args: ["sign-blob", "--output-signature", "${artifact}-keyless.sig", "--output-certificate", "${artifact}-keyless.pem.b64", "${artifact}"]
     artifacts: checksum
   - id: packages-keyless
     signature: "${artifact}-keyless.sig"
-    certificate: "${artifact}-keyless.pem"
+    certificate: "${artifact}-keyless.pem.b64"
     cmd: ./dist/cosign-linux-amd64
-    args: ["sign-blob", "--output-signature", "${artifact}-keyless.sig", "--output-certificate", "${artifact}-keyless.pem", "${artifact}"]
+    args: ["sign-blob", "--output-signature", "${artifact}-keyless.sig", "--output-certificate", "${artifact}-keyless.pem.b64", "${artifact}"]
     artifacts: package
 
 nfpms: