From c9de03ec4336a930fc07cd31999f21a749ed914b Mon Sep 17 00:00:00 2001
From: Bryan Frimin <bryan@getprobo.com>
Date: Mon, 16 Feb 2026 17:26:35 +0100
Subject: [PATCH] Fix cosign cache race condition

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
---
 .github/workflows/release.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 128f763c0..44b5d6f55 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -46,6 +46,9 @@ jobs:
       - name: Install Cosign
         uses: sigstore/cosign-installer@053f9b74638557590800a301da1ba82351507e2c # v3.8.1
 
+      - name: Initialize Cosign TUF root
+        run: cosign initialize
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0