another cosign try

Signed-off-by: Alexander Dahmen <alexander.dahmen@inovex.de>

Author: Fyusel

.goreleaser.yaml

@@ -32,12 +32,14 @@ signs:
     args:
       - sign-blob
       - '-y'
+      - '--verbose'
       - '--output-certificate=${certificate}'
+      - "--output-signature=${signature}"
       - '--bundle=${signature}'
       - '${artifact}'
     artifacts: all
-    # Test
-    #output: true
+    # remove later
+    output: true
 
 sboms:
   - artifacts: archive