feat(tofuutils/tenv): cosign

pkgs/tofuutils/tenv/pkg.yaml

@@ -1,5 +1,7 @@
 packages:
   - name: tofuutils/tenv@v4.2.4
+  - name: tofuutils/tenv
+    version: v1.11.19
   - name: tofuutils/tenv
     version: v1.10.2
   - name: tofuutils/tenv

pkgs/tofuutils/tenv/registry.yaml

@@ -103,7 +103,7 @@ packages:
           type: github_release
           asset: tenv_{{.Version}}_checksums.txt
           algorithm: sha256
-      - version_constraint: "true"
+      - version_constraint:  semver("<= 1.11.19")
         # 1.11.0 atmos
         asset: tenv_{{.Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
         format: tar.gz
@@ -126,3 +126,35 @@ packages:
           type: github_release
           asset: tenv_{{.Version}}_checksums.txt
           algorithm: sha256
+      - version_constraint: "true"
+        asset: tenv_{{.Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
+        format: tar.gz
+        files:
+          - name: tenv
+          - name: terraform
+          - name: tofu
+          - name: terragrunt
+          - name: tf
+          - name: atmos
+        overrides:
+          - goos: windows
+            format: zip
+        replacements:
+          amd64: x86_64
+          darwin: Darwin
+          linux: Linux
+          windows: Windows
+        checksum:
+          type: github_release
+          asset: tenv_{{.Version}}_checksums.txt
+          algorithm: sha256
+          cosign:
+            opts:
+              - --certificate-identity
+              - https://github.com/tofuutils/tenv/.github/workflows/release.yml@refs/tags/{{.Version}}
+              - --certificate-oidc-issuer
+              - https://token.actions.githubusercontent.com
+              - --signature
+              - https://github.com/tofuutils/tenv/releases/download/{{.Version}}/tenv_{{.Version}}_checksums.txt.sig
+              - --certificate
+              - https://github.com/tofuutils/tenv/releases/download/{{.Version}}/tenv_{{.Version}}_checksums.txt.pem