diff --git a/.goreleaser.yml b/.goreleaser.yml
index 26d67e14..d831315a 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -18,14 +18,11 @@ sboms:
 
 signs:
   - cmd: cosign
-    env:
-      - COSIGN_EXPERIMENTAL=1
-    certificate: '${artifact}.pem'
+    signature: "${artifact}.sigstore.json"
     args:
       - sign-blob
       - "--yes"
-      - '--output-certificate=${certificate}'
-      - '--output-signature=${signature}'
+      - '--bundle=${signature}'
       - '${artifact}'
     artifacts: checksum
     output: true