use keyless signing

smartcontractkit · Aug 16, 2024 · 7f5e79c · 7f5e79c
1 parent 2529e1a
commit 7f5e79c
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/.goreleaser.develop.yaml b/.goreleaser.develop.yaml
@@ -186,8 +186,15 @@ docker_manifests:
 
 # See https://goreleaser.com/customization/docker_sign/
 docker_signs:
-  - artifacts: all
-    stdin: "{{ .Env.COSIGN_PASSWORD }}"
+  - cmd: cosign
+    env:
+    - COSIGN_EXPERIMENTAL=1
+    artifacts: all
+    args:
+      - 'sign'
+      - '--oidc-issuer=https://token.actions.githubusercontent.com'
+      - 'artifact'
+    # stdin: "{{ .Env.COSIGN_PASSWORD }}"
 
 checksum:
   name_template: "checksums.txt"