revert cosign signing of release checksums file (#2571)

Signed-off-by: Alex Goodman <[email protected]>
anchore · Jan 31, 2024 · 377538e · 377538e
1 parent bbe7fa1
commit 377538e
Showing 1 changed file with 0 additions and 13 deletions.
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
@@ -259,16 +259,3 @@ sboms:
       - "$artifact"
       - "--output"
       - "json=$document"
-
-signs:
-  - cmd: .tool/cosign
-    signature: "${artifact}.sig"
-    certificate: "${artifact}.pem"
-    args:
-      - "sign-blob"
-      - "--oidc-issuer=https://token.actions.githubusercontent.com"
-      - "--output-certificate=${certificate}"
-      - "--output-signature=${signature}"
-      - "${artifact}"
-      - "--yes"
-    artifacts: checksum