Merge pull request #607 from saschagrunert/fix/goreleaser-cosign-bundle

Switch cosign signing to new bundle format

Author: k8s-ci-robot

.goreleaser.yml

@@ -52,16 +52,11 @@ archives:
 signs:
   # Keyless
   - id: tejolote-keyless
-    signature: "${artifact}.sig"
-    certificate: "${artifact}.pem"
+    signature: "${artifact}.sigstore.json"
     cmd: cosign
     args:
       - "sign-blob"
-      - "--new-bundle-format=false"
-      - "--output-signature"
-      - "${artifact}.sig"
-      - "--output-certificate"
-      - "${artifact}.pem"
+      - "--bundle=${signature}"
       - "${artifact}"
     artifacts: all