From 2e6cbfa382fec59b67fe5a3d83955afb04db6bac Mon Sep 17 00:00:00 2001
From: Aditya Mahendrakar <a.mahendrakar@yahoo.com>
Date: Mon, 6 Nov 2023 22:39:06 -0800
Subject: [PATCH] use digest instead of tag when invoking cosign sign

---
 .goreleaser.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.goreleaser.yml b/.goreleaser.yml
index b120a850..e7be5ae9 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -42,7 +42,7 @@ docker_signs:
 - cmd: cosign
   args:
   - 'sign'
-  - '${artifact}'
+  - '${artifact}@${digest}'
   artifacts: all
   output: true