From 41edccc268e29c6e5e9eee65d1a90ffea4da3171 Mon Sep 17 00:00:00 2001
From: elchananarb <110327842+elchananarb@users.noreply.github.com>
Date: Tue, 24 Sep 2024 18:17:52 +0300
Subject: [PATCH] Update .goreleaser.yml (#891)

* Update .goreleaser.yml

* Update .goreleaser.yml
---
 .goreleaser.yml | 14 ++++----------
 1 file changed, 4 insertions(+), 10 deletions(-)

diff --git a/.goreleaser.yml b/.goreleaser.yml
index 91a666520..fb27f827d 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -67,20 +67,14 @@ dockers:
       - "checkmarx/ast-cli:{{ .Tag }}"
 
 docker_signs:
-  - id: ast-cli-signing
-    cmd: cosign
+  - cmd: cosign sign --key ${COSIGN_PRIVATE_KEY}
     args:
-      - "sign"
-      - "--key-env=COSIGN_PRIVATE_KEY"
       - "${artifact}"
-      - "--yes"
     artifacts: images
-    stdin: "{{ secrets.COSIGN_PASSWORD }}"
     env:
-      - COSIGN_PRIVATE_KEY={{ secrets.COSIGN_PRIVATE_KEY }}
-      - COSIGN_PASSWORD={{ secrets.COSIGN_PASSWORD }}
-      - COSIGN_PUBLIC_KEY={{ secrets.COSIGN_PUBLIC_KEY }}
-    output: true
+      - COSIGN_PRIVATE_KEY=${{ .Env.COSIGN_PRIVATE_KEY }}
+      - COSIGN_PASSWORD=${{ .Env.COSIGN_PASSWORD }}
+
 
 archives:
   - id: cx