remove private cosign test key

.github/workflows/goreleaser.yml

@@ -43,11 +43,16 @@ jobs:
         uses: sigstore/cosign-installer@main
         with:
           cosign-release: 'v1.2.1'
+      - name: write cosign.key to environment
+        run: 'echo "$COSIGN_KEY" > .github/cosign.key'
+        shell: bash
+        env:
+          COSIGN_KEY: ${{ secrets.COSIGN_KEY }}
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v2
         with:
           distribution: goreleaser
-          version: latest
+          version: 'v0.180.2'
           args: release --rm-dist
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -6,3 +6,6 @@ dist
 
 # VSCode configuration
 .vscode
+
+# ignore cosign private key
+cosign.key

.goreleaser.yaml

@@ -6,7 +6,7 @@ builds:
       - "-extldflags=-znow"
       - "-X main.tag={{.Version}}"
       - "-X main.commit={{.FullCommit}}"
-      - "-X main.date={{.Date}}"
+      - "-X main.date={{.CommitDate}}"
     env:
       - "CGO_ENABLED=0"
       - "GO111MODULE=on"

cmd/in-toto/version.go

@@ -14,7 +14,7 @@ var (
 var versionCmd = &cobra.Command{
 	Use:   "version",
 	Short: "Display the version of the in-toto CLI tool",
-	Long:  `Display the commit ID, the date and the version tag of the in-toto CLI as embedded by the build system.`,
+	Long:  `Display the commit ID, the build date and the version tag of the in-toto CLI as embedded by the build system.`,
 	RunE:  version,
 }
 

cosign.pub

@@ -1,4 +1,4 @@
 -----BEGIN PUBLIC KEY-----
-MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE2aAPtd19aLTQNfMnspdWzs2e0ieD
-NxbkxAfrlSrJ7t/CUdQVlzqRydZQ1HnRfGmB6xPW6U7BDFUexVYLMTMOBQ==
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAESv8K4ZaLK5ZQcjycNcuHCY2zYE65
+vagRvLoqo/ugR/52+ZLcq3DW41pfyjK0XVNSCqpdIaA0qUkmkDcwgwKFUg==
 -----END PUBLIC KEY-----