fix(openvex/vexctl): configure cosign

pkgs/openvex/vexctl/pkg.yaml

@@ -2,5 +2,3 @@ packages:
   - name: openvex/[email protected]
   - name: openvex/vexctl
     version: v0.2.5
-  - name: openvex/vexctl
-    version: v0.2.0

pkgs/openvex/vexctl/registry.yaml

@@ -6,22 +6,59 @@ packages:
     description: A  tool to create, transform and attest VEX metadata
     version_constraint: "false"
     version_overrides:
-      - version_constraint: semver("<= 0.2.0")
       - version_constraint: semver("<= 0.2.5")
         asset: vexctl-{{.OS}}-{{.Arch}}
         format: raw
         windows_arm_emulation: true
-        complete_windows_ext: false
         checksum:
           type: github_release
           asset: vex_checksums.txt
           algorithm: sha256
+          cosign:
+            opts:
+              - --certificate-identity-regexp
+              - "https://github\\.com/openvex/vexctl/\\.github/workflows/release\\.yaml@.*"
+              - --certificate-oidc-issuer
+              - "https://token.actions.githubusercontent.com"
+              - --signature
+              - https://github.com/openvex/vexctl/releases/download/{{.Version}}/vex_checksums.txt.sig
+              - --certificate
+              - https://github.com/openvex/vexctl/releases/download/{{.Version}}/vex_checksums.txt.pem
+        cosign:
+          opts:
+            - --certificate-identity-regexp
+            - "https://github\\.com/openvex/vexctl/\\.github/workflows/release\\.yaml@.*"
+            - --certificate-oidc-issuer
+            - "https://token.actions.githubusercontent.com"
+            - --signature
+            - https://github.com/openvex/vexctl/releases/download/{{.Version}}/{{.Asset}}.sig
+            - --certificate
+            - https://github.com/openvex/vexctl/releases/download/{{.Version}}/{{.Asset}}.pem
       - version_constraint: "true"
         asset: vexctl-{{.OS}}-{{.Arch}}
         format: raw
         windows_arm_emulation: true
-        complete_windows_ext: false
         checksum:
           type: github_release
           asset: vexctl_checksums.txt
           algorithm: sha256
+          cosign:
+            opts:
+              - --certificate-identity-regexp
+              - "https://github\\.com/openvex/vexctl/\\.github/workflows/release\\.yaml@.*"
+              - --certificate-oidc-issuer
+              - "https://token.actions.githubusercontent.com"
+              - --signature
+              - https://github.com/openvex/vexctl/releases/download/{{.Version}}/vexctl_checksums.txt.sig
+              - --certificate
+              - https://github.com/openvex/vexctl/releases/download/{{.Version}}/vexctl_checksums.txt.pem
+        cosign:
+          opts:
+            - --certificate-identity-regexp
+            - "https://github\\.com/openvex/vexctl/\\.github/workflows/release\\.yaml@.*"
+            - --certificate-oidc-issuer
+            - "https://token.actions.githubusercontent.com"
+            - --signature
+            - https://github.com/openvex/vexctl/releases/download/{{.Version}}/{{.Asset}}.sig
+            - --certificate
+            - https://github.com/openvex/vexctl/releases/download/{{.Version}}/{{.Asset}}.pem