use digest instead of tag when invoking cosign sign (#331)

theparanoids · Nov 7, 2023 · 1785568 · 1785568
1 parent 4c5db83
commit 1785568
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -42,7 +42,7 @@ docker_signs:
 - cmd: cosign
   args:
   - 'sign'
-  - '${artifact}'
+  - '${artifact}@${digest}'
   artifacts: all
   output: true