Merge pull request #985 from fluxcd/cosign-fix

Fix cosign workflow

Author: stefanprodan

cosign/README.md .cosign/README.md

@@ -56,14 +56,14 @@ jobs:
       - name: Sign image
         run: |
           echo -n "${{secrets.COSIGN_PASSWORD}}" | \
-          cosign sign -key ./cosign/cosign.key -a git_sha=$GITHUB_SHA \
+          cosign sign -key ./.cosign/cosign.key -a git_sha=$GITHUB_SHA \
           ghcr.io/fluxcd/flagger:${{ steps.prep.outputs.VERSION }}
       - name: Check images
         run: |
           docker buildx imagetools inspect ghcr.io/fluxcd/flagger:${{ steps.prep.outputs.VERSION }}
       - name: Verifiy image signature
         run: |
-          cosign verify -key ./cosign/cosign.pub \
+          cosign verify -key ./.cosign/cosign.pub \
           ghcr.io/fluxcd/flagger:${{ steps.prep.outputs.VERSION }}
       - name: Publish Helm charts
         uses: stefanprodan/[email protected]

cosign/cosign.key .cosign/cosign.key

@@ -11,7 +11,7 @@ For more details see the [OSM Progressive Delivery tutorial](https://docs.flagge
 
 Starting with this version, Flagger container images are signed with
 [sigstore/cosign](https://github.com/sigstore/cosign), for more details see the
-[Flagger cosign docs](https://github.com/fluxcd/flagger/blob/main/cosign/README.md).
+[Flagger cosign docs](https://github.com/fluxcd/flagger/blob/main/.cosign/README.md).
 
 #### Features