Merge pull request #81 from adambkaplan/fix-release-signing

Fix signing of released image

Author: openshift-merge-robot

.github/workflows/release.yaml

@@ -29,7 +29,7 @@ jobs:
     - uses: actions/setup-go@v2
       with:
         go-version: 1.18.x
-    - uses: sigstore/cosign-installer@v1.2.0
+    - uses: sigstore/cosign-installer@v2.3.0
     - name: Build Release Images
       env:
         REGISTRY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
@@ -44,7 +44,7 @@ jobs:
         # OIDC.
         COSIGN_EXPERIMENTAL: "true"
       run: |
-        grep -o "ghcr.io[^\"]*" "${GITHUB_WORKSPACE}/bundle/manifests/shipwright-operator.clusterserviceversion.yaml" | xargs cosign sign \
+        grep -o "ghcr.io[^\"]*" "${GITHUB_WORKSPACE}/_output/olm/bundle/manifests/shipwright-operator.clusterserviceversion.yaml" | uniq | xargs -n 1 cosign sign \
             -a sha=${{ github.sha }} \
             -a run_id=${{ github.run_id }} \
             -a run_attempt=${{ github.run_attempt }}