I've replaced my cosign.pub and pasted the private key under Secrets > Repository secretes, under the variables SIGNING_SECRET and COSIGN_PRIVATE_KEY. Should I be using Variables instead? As I understand, Variables are plain-text and should't be used for secrets, so not sure where I'm going wrong.
SIGNING_SECRETCOSIGN_PRIVATE_KEYSIGNING_SECRET with cosign.key and try again?
