Fix component signing

Author: yoshuawuyts

.github/workflows/publish.yml

@@ -81,7 +81,7 @@ jobs:
 
       - name: Publish `:<version>` to GitHub Container Registry
         if: github.event_name != 'workflow_dispatch'
-        id: publish
+        id: publish_versioned
         uses: bytecodealliance/wkg-github-action@v5
         with:
           file: target/wasm32-wasip1/release/${{ env.COMPONENT_NAME_UNDERSCORED }}
@@ -92,9 +92,13 @@ jobs:
           homepage: ${{ env.COMPONENT_HOMEPAGE }}
           licenses: ${{ env.COMPONENT_LICENSES }}
 
+      - name: Sign the versioned wasm component
+        if: github.event_name != 'workflow_dispatch'
+        run: cosign sign --yes ghcr.io/${{ env.IMAGE_NAME }}/${{ env.COMPONENT_NAME }}@${{ steps.publish_versioned.outputs.digest }}
+
       - name: Publish `:latest` release to GitHub Container Registry
         if: github.event_name != 'workflow_dispatch'
-        id: publish
+        id: publish_latest
         uses: bytecodealliance/wkg-github-action@v5
         with:
           file: target/wasm32-wasip1/release/${{ env.COMPONENT_NAME_UNDERSCORED }}
@@ -105,6 +109,7 @@ jobs:
           homepage: ${{ env.COMPONENT_HOMEPAGE }}
           licenses: ${{ env.COMPONENT_LICENSES }}
 
-      - name: Sign the wasm component
+      - name: Sign the latest wasm component
         if: github.event_name != 'workflow_dispatch'
-        run: cosign sign --yes ghcr.io/${{ env.IMAGE_NAME }}/${{ env.COMPONENT_NAME }}@${{ steps.publish.outputs.digest }}
+        run: cosign sign --yes ghcr.io/${{ env.IMAGE_NAME }}/${{ env.COMPONENT_NAME }}@${{ steps.publish_latest.outputs.digest }}
+