From 454e6a52d4587fbc699a9ead892e1fab9f5a559c Mon Sep 17 00:00:00 2001
From: Sacha Al Himdani <sacha@getprobo.com>
Date: Mon, 30 Mar 2026 13:55:11 +0200
Subject: [PATCH] Fix goreleaser snapshot signing creating missing bundle file

When running in snapshot mode, the signing step skips cosign but does
not create the expected .bundle file. The checksum step then fails
because it cannot find the signature artifact. Touch the file so the
pipeline can continue.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
---
 .goreleaser.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 4e07d86cb..cbaabb2bb 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -142,6 +142,7 @@ signs:
       - |
         if [ "{{ .IsSnapshot }}" = "true" ]; then
           echo "Skipping signing (snapshot: {{ .IsSnapshot }})"
+          touch "${signature}"
         else
           cosign sign-blob --bundle="${signature}" "${artifact}" --yes
         fi