From b5a74000b541b57eb0cf4ceca754f9d292cbb74c Mon Sep 17 00:00:00 2001
From: Raffael Sahli <raffael.sahli@doodle.com>
Date: Mon, 21 Mar 2022 15:12:54 +0100
Subject: [PATCH] disable cosign

---
 .goreleaser.yaml | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index e3fffb1f..d70e3d4d 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -24,15 +24,15 @@ sboms:
 # signs the checksum file
 # all files (including the sboms) are included in the checksum
 # https://goreleaser.com/customization/sign
-signs:
-- cmd: cosign
-  env:
-  - COSIGN_EXPERIMENTAL=1
-  certificate: "${artifact}.pem"
-  args:
-  - sign-blob
-  - "--output-certificate=${certificate}"
-  - "--output-signature=${signature}"
-  - "${artifact}"
-  artifacts: checksum
-  output: true
+#signs:
+#- cmd: cosign
+#  env:
+#  - COSIGN_EXPERIMENTAL=1
+#  certificate: "${artifact}.pem"
+#  args:
+#  - sign-blob
+#  - "--output-certificate=${certificate}"
+#  - "--output-signature=${signature}"
+#  - "${artifact}"
+#  artifacts: checksum
+#  output: true