use oidc flags with cosign

Signed-off-by: kranurag7 <[email protected]>

Author: kranurag7

KubeArmor/.goreleaser.yaml

@@ -14,6 +14,8 @@ signs:
     certificate: '${artifact}.cert'
     args:
       - sign-blob
+      - '--oidc-issuer=https://token.actions.githubusercontent.com'
+      - '--oidc-provider=github-actions'
       - '--output-certificate=${certificate}' 
       - '--output-signature=${signature}'
       - '${artifact}'