ci: update docker image

Signed-off-by: Carlos Alexandro Becker <[email protected]>

.goreleaser.yaml

@@ -55,8 +55,6 @@ sboms:
 # https://goreleaser.com/customization/sign
 signs:
   - cmd: cosign
-    env:
-      - COSIGN_EXPERIMENTAL=1
     certificate: "${artifact}.pem"
     args:
       - sign-blob
@@ -71,7 +69,7 @@ signs:
 # https://goreleaser.com/customization/docker
 dockers:
   - image_templates:
-      - "ghcr.io/goreleaser/supply-chain-example:{{ .Tag }}"
+      - "ghcr.io/goreleaser/example-supply-chain:{{ .Tag }}"
     dockerfile: Dockerfile
     build_flag_templates:
       - "--pull"
@@ -85,8 +83,6 @@ dockers:
 # https://goreleaser.com/customization/docker_sign
 docker_signs:
   - cmd: cosign
-    env:
-      - COSIGN_EXPERIMENTAL=1
     artifacts: images
     output: true
     args:

README.md

@@ -53,5 +53,9 @@ gh attestation verify --owner goreleaser *.tar.gz
 ### Docker image
 
 ```shell
-COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/goreleaser/supply-chain-example:v1.3.3
+cosign verify \
+  --certificate-identity 'https://github.com/goreleaser/example-supply-chain/.github/workflows/release.yml@refs/tags/v1.3.3' \
+  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
+  --cert https://github.com/goreleaser/example-supply-chain/releases/download/v1.3.3/checksums.txt.pem \
+  ghcr.io/goreleaser/example-supply-chain:v1.3.3
 ```