diff --git a/.goreleaser.yml b/.goreleaser.yml
index 8e7f67ab..1d285a41 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -47,8 +47,8 @@ checksum:
   name_template: "checksums.txt"
 
 signs:
-- cmd: sh
-  args: ["-c", "echo 'y' | cosign sign-blob --key=hashivault://cosign --output-signature ${signature} ${digest}"]
+- cmd: cosign
+  args: ["sign-blob", "--yes", "--key=hashivault://cosign", "--output-signature=${signature}", "${artifact}"]
   artifacts: checksum
 
 docker_signs: