You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
ci: add contents:write permission for release job (#803)
GoReleaser needs contents:write to create GitHub releases and
upload assets. Without it, the GITHUB_TOKEN defaults to none
for contents when job-level permissions are specified.
fix: update cosign signing to use bundle format for v3 compatibility (#……783)
The release workflow was failing because cosign v3 no longer generates
separate .pem certificate files with --output-certificate. Updated to use
the new --bundle flag which combines certificate and signature into a
single .sigstore.json file.
Changes:
- Remove certificate field and --output-certificate flag from signs config
- Use signature field with .sigstore.json extension
- Remove deprecated COSIGN_EXPERIMENTAL=1 environment variable
Fixes#782
Signed-off-by: Engin Diri <engin.diri@ediri.de>