Fix signing path

Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>

.github/workflows/release.yaml

@@ -43,10 +43,7 @@ jobs:
           chmod +x luet
           sudo mv luet /usr/bin/luet
           # Construct an array like this from the found versions:
-          sudo luet --config framework-profile.yaml search -o json k8s/k3s
-
           sudo luet --config framework-profile.yaml search -o json k8s/k3s  | jq '.packages | map(.version)' >  k3s_versions.json
-          cat k3s_versions.json
           content=$(jq -s '. | combinations | .[0] + {"k3s_version": .[1]} | select(.frameworkonly != "true")' .github/flavors.json k3s_versions.json)
           # the following lines are only required for multi line json
           content="${content//'%'/'%25'}"
@@ -181,9 +178,8 @@ jobs:
         run: |
           sudo chmod -R 777 release
           filename=$(ls release/*.iso.sha256)
-          cosign sign-blob --yes --output-certificate="release/${filename}.pem" \
-                          --output-signature="release/${filename}.sig" \
-                          "release/${filename}"
+          cosign sign-blob --yes --output-certificate="${filename}.pem" \
+                          --output-signature="${filename}.sig" "${filename}"
       - name: Release
         uses: softprops/action-gh-release@v1
         if: startsWith(github.ref, 'refs/tags/')