github.com/triarius/goreleaser@v1.12.5/internal/pipe/sign/testdata/cosign (about) .gitignore cosign.key cosign.pub