Merge pull request #636 from saschagrunert/fix/cosign-bundle-format

Switch cosign signing to new bundle format

Author: k8s-ci-robot

.goreleaser.yml

@@ -52,10 +52,12 @@ archives:
 signs:
   # Keyless
   - id: bom-keyless
-    signature: "${artifact}.sig"
-    certificate: "${artifact}.pem"
+    signature: "${artifact}.sigstore.json"
     cmd: cosign
-    args: ["sign-blob", "--output-signature", "${artifact}.sig", "--output-certificate", "${artifact}.pem", "${artifact}"]
+    args:
+      - "sign-blob"
+      - "--bundle=${signature}"
+      - "${artifact}"
     artifacts: all
 
 sboms: