Disable for now due some issues when downloading the knative module (#…

…1546)

* Disable for now due some issues when downloading the knative module, maybe due to the replace in the go.mod

Signed-off-by: cpanato <ctadeu@gmail.com>

* sign packages as well

Signed-off-by: cpanato <ctadeu@gmail.com>

.goreleaser.yml

@@ -16,8 +16,9 @@ before:
 # this is needed because we are generating files that goreleaser was not aware to push to GH project release
   - /bin/bash -c 'if [ -z "$CI" ]; then make sign-container-release && make sign-keyless-release; fi'
 
-gomod:
-  proxy: true
+# Disable for now due some issues when downloading the knative module, maybe due to the replace in the go.mod
+# gomod:
+#   proxy: true
 
 sboms:
 - artifacts: binary
@@ -231,6 +232,12 @@ signs:
     cmd: ./dist/cosign-linux-amd64
     args: ["sign-blob", "--output-signature", "${artifact}-keyless.sig", "--output-certificate", "${artifact}-keyless.pem", "${artifact}"]
     artifacts: checksum
+  - id: packages-keyless
+    signature: "${artifact}-keyless.sig"
+    certificate: "${artifact}-keyless.pem"
+    cmd: ./dist/cosign-linux-amd64
+    args: ["sign-blob", "--output-signature", "${artifact}-keyless.sig", "--output-certificate", "${artifact}-keyless.pem", "${artifact}"]
+    artifacts: package
 
 nfpms:
   - id: cosign