Update to use the correct path

.github/actions/linux-code-sign/action.yml

@@ -4,6 +4,9 @@ inputs:
   target:
     description: Target triple for the artifacts to sign.
     required: true
+  artifacts-dir:
+    description: Absolute path to the directory containing built binaries to sign.
+    required: true
 
 runs:
   using: composite
@@ -21,19 +24,21 @@ runs:
       run: |
         set -euo pipefail
 
-        dest="dist/${{ inputs.target }}"
+        dest="${{ inputs.artifacts-dir }}"
         if [[ ! -d "$dest" ]]; then
           echo "Destination $dest does not exist"
           exit 1
         fi
 
-        shopt -s nullglob
-        for artifact in "$dest"/*; do
-          if [[ -f "$artifact" ]]; then
-            cosign sign-blob \
-              --yes \
-              --output-signature "${artifact}.sig" \
-              --output-certificate "${artifact}.pem" \
-              "$artifact"
+        for binary in codex codex-responses-api-proxy; do
+          artifact="${dest}/${binary}"
+          if [[ ! -f "$artifact" ]]; then
+            echo "Binary $artifact not found"
+            exit 1
           fi
+
+          cosign sign-blob \
+            --yes \
+            --bundle "${artifact}.sigstore" \
+            "$artifact"
         done