From 1785568eb16bc37b3aa06ecaef4ead6af76a860f Mon Sep 17 00:00:00 2001
From: Aditya Mahendrakar <a.mahendrakar@yahoo.com>
Date: Mon, 6 Nov 2023 23:17:36 -0800
Subject: [PATCH] use digest instead of tag when invoking cosign sign (#331)

---
 .goreleaser.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.goreleaser.yml b/.goreleaser.yml
index b120a850..e7be5ae9 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -42,7 +42,7 @@ docker_signs:
 - cmd: cosign
   args:
   - 'sign'
-  - '${artifact}'
+  - '${artifact}@${digest}'
   artifacts: all
   output: true