feat(bmf-san/ggc): cosign config

pkgs/bmf-san/ggc/pkg.yaml

@@ -1,2 +1,6 @@
 packages:
-  - name: bmf-san/ggc@v8.2.1
+  - name: bmf-san/ggc@v8.4.0
+  - name: bmf-san/ggc
+    version: v8.3.0
+  - name: bmf-san/ggc
+    version: v8.2.1

pkgs/bmf-san/ggc/registry.yaml

@@ -8,10 +8,40 @@ packages:
     version_overrides:
       - version_constraint: semver("<= 3.2.1")
         no_asset: true
-      - version_constraint: "true"
+      - version_constraint: semver("< 8.3.0")
         asset: ggc_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
         format: tar.gz
         checksum:
           type: github_release
           asset: ggc_{{trimV .Version}}_checksums.txt
           algorithm: sha256
+      - version_constraint: semver("< 8.4.0")
+        asset: ggc_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
+        format: tar.gz
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+        overrides:
+          - goos: windows
+            format: zip
+      - version_constraint: "true"
+        asset: ggc_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
+        format: tar.gz
+        checksum:
+          type: github_release
+          asset: checksums.txt
+          algorithm: sha256
+          cosign:
+            opts:
+              - --certificate
+              - https://github.com/bmf-san/ggc/releases/download/{{.Version}}/checksums.txt.pem
+              - --certificate-identity
+              - "https://github.com/bmf-san/ggc/.github/workflows/release.yml@refs/tags/{{.Version}}"
+              - --certificate-oidc-issuer
+              - https://token.actions.githubusercontent.com
+              - --signature
+              - https://github.com/bmf-san/ggc/releases/download/{{.Version}}/checksums.txt.sig
+        overrides:
+          - goos: windows
+            format: zip