From 1f1e09032c931e63ad3c923f1d6b006daaa2b556 Mon Sep 17 00:00:00 2001
From: Pavel Lineitsev <plineitsev@confluent.io>
Date: Thu, 25 Jun 2026 16:37:31 -0400
Subject: [PATCH] fix(ci): update cosign command to remove registry referrers
 mode

---
 .github/workflows/docker-publish.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 4aed5a9..00dc23b 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -199,6 +199,6 @@ jobs:
       - name: Sign and attest
         run: |
           REF="${{ env.REGISTRY }}/${{ env.IMAGE_NAME_LC }}@${{ needs.merge.outputs.digest }}"
-          cosign sign --yes --recursive --registry-referrers-mode oci-1-1 "${REF}"
+          cosign sign --yes --recursive "${REF}"
           cosign attest --yes \
             --predicate sbom.spdx.json --type spdxjson "${REF}"