Fix cosign workflow

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

.github/workflows/release.yml

@@ -56,14 +56,14 @@ jobs:
       - name: Sign image
         run: |
           echo -n "${{secrets.COSIGN_PASSWORD}}" | \
-          cosign sign -key ./cosign/cosign.key -a git_sha=$GITHUB_SHA \
+          cosign sign -key ./.cosign/cosign.key -a git_sha=$GITHUB_SHA \
           ghcr.io/fluxcd/flagger:${{ steps.prep.outputs.VERSION }}
       - name: Check images
         run: |
           docker buildx imagetools inspect ghcr.io/fluxcd/flagger:${{ steps.prep.outputs.VERSION }}
       - name: Verifiy image signature
         run: |
-          cosign verify -key ./cosign/cosign.pub \
+          cosign verify -key ./.cosign/cosign.pub \
           ghcr.io/fluxcd/flagger:${{ steps.prep.outputs.VERSION }}
       - name: Publish Helm charts
         uses: stefanprodan/helm-gh-pages@v1.3.0

CHANGELOG.md

@@ -11,7 +11,7 @@ For more details see the [OSM Progressive Delivery tutorial](https://docs.flagge
 
 Starting with this version, Flagger container images are signed with
 [sigstore/cosign](https://github.com/sigstore/cosign), for more details see the
-[Flagger cosign docs](https://github.com/fluxcd/flagger/blob/main/cosign/README.md).
+[Flagger cosign docs](https://github.com/fluxcd/flagger/blob/main/.cosign/README.md).
 
 #### Features