From e76deb929313fc59c0402109833cb058d1c9b025 Mon Sep 17 00:00:00 2001
From: kranurag7 <81210977+kranurag7@users.noreply.github.com>
Date: Mon, 29 Apr 2024 12:31:03 +0530
Subject: [PATCH] use oidc flags with cosign

Signed-off-by: kranurag7 <81210977+kranurag7@users.noreply.github.com>
---
 KubeArmor/.goreleaser.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/KubeArmor/.goreleaser.yaml b/KubeArmor/.goreleaser.yaml
index 8dd0c2f153..85bdaddb6b 100644
--- a/KubeArmor/.goreleaser.yaml
+++ b/KubeArmor/.goreleaser.yaml
@@ -14,6 +14,8 @@ signs:
     certificate: '${artifact}.cert'
     args:
       - sign-blob
+      - '--oidc-issuer=https://token.actions.githubusercontent.com'
+      - '--oidc-provider=github-actions'
       - '--output-certificate=${certificate}' 
       - '--output-signature=${signature}'
       - '${artifact}'