fix: jq command

Author: fcanovai

.github/workflows/bake.yaml

@@ -78,7 +78,7 @@ jobs:
       - name: Sign images
         run: |
           echo '${{ steps.build.outputs.metadata }}' | \
-            jq '.[] | (."image.name" | sub(",.*";"" )) + "@" + ."containerimage.digest"' | \
+            jq -r '.[] | (."image.name" | sub(",.*";"" )) + "@" + ."containerimage.digest"' | \
             xargs cosign sign --yes
 
   security:
@@ -171,7 +171,6 @@ jobs:
         # how to use cosign.
       - name: Sign images
         run: |
-          images=$(echo '${{ steps.build.outputs.metadata }}' |
-            jq '.[] | (."image.name" | sub(",.*";"" )) + "@" + ."containerimage.digest"'
-          )
-          cosign sign --yes ${images}
+          echo '${{ steps.build.outputs.metadata }}' | \
+            jq -r '.[] | (."image.name" | sub(",.*";"" )) + "@" + ."containerimage.digest"' | \
+            xargs cosign sign --yes