diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index 216fbe7..ffc2e9d 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -100,6 +100,7 @@ signs:
     args:
       - "sign-blob"
       - "--output-signature=${signature}"
+      - "--output-certificate=${certificate}"
       - "${artifact}"
       - "--yes" # needed on cosign 2.0.0+
     artifacts: archive