diff --git a/.goreleaser.yml b/.goreleaser.yml
index 4ee3fba..41850c7 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -101,7 +101,10 @@ checksum:
 signs:
   - id: cosign-checksums
     cmd: cosign
-    artifacts: checksums
+    # GoReleaser v2 uses the singular `checksum` (the schema's enum), not
+    # `checksums`. The earlier v1 docs floated both — the v2 release
+    # rejected the plural form with `invalid list of artifacts to sign`.
+    artifacts: checksum
     signature: "${artifact}.sig"
     certificate: "${artifact}.pem"
     args: