ci: drop cosign artifact signing

Causes too much trouble.
go-faster · Feb 18, 2025 · 8489119 · 8489119
1 parent aa19915
commit 8489119
Showing 1 changed file with 0 additions and 31 deletions.
diff --git a/.goreleaser.yaml b/.goreleaser.yaml
@@ -163,37 +163,6 @@ docker_manifests:
       - "{{ .Env.IMAGE }}:latest-arm64"
       - "{{ .Env.IMAGE }}:latest-riscv64"
 
-signs:
-  - cmd: cosign
-    id: cosign
-    signature: "${artifact}.sig"
-    certificate: "${artifact}.pem"
-    output: true
-    artifacts: archive
-    args:
-      - sign-blob
-      - "--key"
-      - "env://COSIGN_PRIVATE_KEY"
-      - "--output-signature"
-      - "${artifact}.sig"
-      - "${artifact}"
-      - --yes
-
-  - cmd: cosign
-    id: keyless
-    signature: "${artifact}.keyless.sig"
-    certificate: "${artifact}.keyless.pem"
-    output: true
-    artifacts: archive
-    args:
-      - sign-blob
-      - "--output-certificate"
-      - "${artifact}.keyless.pem"
-      - "--output-signature"
-      - "${artifact}.keyless.sig"
-      - "${artifact}"
-      - --yes
-
 docker_signs:
   - cmd: cosign
     artifacts: manifests