ci(fix): temporary removing cosign verification (#564)

Author: tobiasehlert

.github/workflows/build.yml

@@ -239,21 +239,21 @@ jobs:
           docker buildx imagetools inspect ghcr.io/${{ github.repository }}:${{ steps.docker_meta.outputs.version }} --format '{{ json (index .SBOM "linux/amd64") }}'
           echo "::endgroup::"
 
-      - name: Verify cosign signatures
-        run: |
-          echo "::group::Verify signature (DockerHub)"
-          cosign verify --rekor-url https://rekor.sigstore.dev \
-            --certificate-identity "https://github.com/${{ github.workflow_ref }}" \
-            --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
-            ${{ github.repository }}@${{ steps.docker_build.outputs.digest }}
-          echo "::endgroup::"
-
-          echo "::group::Verify signature (GitHub Container Registry)"
-          cosign verify --rekor-url https://rekor.sigstore.dev \
-            --certificate-identity "https://github.com/${{ github.workflow_ref }}" \
-            --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
-            ghcr.io/${{ github.repository }}@${{ steps.docker_build.outputs.digest }}
-          echo "::endgroup::"
+      # - name: Verify cosign signatures
+      #   run: |
+      #     echo "::group::Verify signature (DockerHub)"
+      #     cosign verify --rekor-url https://rekor.sigstore.dev \
+      #       --certificate-identity "https://github.com/${{ github.workflow_ref }}" \
+      #       --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
+      #       ${{ github.repository }}@${{ steps.docker_build.outputs.digest }}
+      #     echo "::endgroup::"
+
+      #     echo "::group::Verify signature (GitHub Container Registry)"
+      #     cosign verify --rekor-url https://rekor.sigstore.dev \
+      #       --certificate-identity "https://github.com/${{ github.workflow_ref }}" \
+      #       --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
+      #       ghcr.io/${{ github.repository }}@${{ steps.docker_build.outputs.digest }}
+      #     echo "::endgroup::"
 
   argocd:
     if: github.event_name == 'release' || (github.event_name == 'push' && github.ref == 'refs/heads/main')