Fix image signing with cosign

Author: ffurrer2

CHANGELOG.md

@@ -18,11 +18,17 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ### Security
 
+## [2.11.1] - 2025-04-20
+
+### Fixed
+
+- Images are now signed with `cosign`
+
 ## [2.11.0] - 2025-04-20
 
 ### Changed
 
-- Artifacts and images are signed with `cosign`
+- Artifacts are now signed with `cosign`
 
 ## [2.10.0] - 2025-04-18
 
@@ -201,7 +207,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 - Initial release of `semver`
 
-[Unreleased]: https://github.com/ffurrer2/semver/compare/v2.11.0...HEAD
+[Unreleased]: https://github.com/ffurrer2/semver/compare/v2.11.1...HEAD
+[2.11.1]: https://github.com/ffurrer2/semver/compare/v2.11.0...v2.11.1
 [2.11.0]: https://github.com/ffurrer2/semver/compare/v2.10.0...v2.11.0
 [2.10.0]: https://github.com/ffurrer2/semver/compare/v2.9.1...v2.10.0
 [2.9.1]: https://github.com/ffurrer2/semver/compare/v2.9.0...v2.9.1

README.md

@@ -31,6 +31,17 @@ scoop install semver
 go install github.com/ffurrer2/semver/v2/cmd/semver@latest
 ```
 
+### Verify signatures
+
+```shell
+cosign verify-blob \
+  --certificate=semver_2.11.0_darwin_amd64-keyless.pem \
+  --signature=semver_2.11.0_darwin_amd64-keyless.sig \
+  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
+  --certificate-identity=https://github.com/ffurrer2/semver/.github/workflows/release.yml@refs/tags/v2.11.0 \
+  semver_2.11.0_darwin_amd64.tar.gz
+```
+
 ## Usage
 
 ### help