---
- name: "Check cosign version"
  ansible.builtin.shell: "cosign version --json"
  args:
    executable: /bin/bash
  register: cosign_active_version_json
  changed_when: false
  failed_when: false
  when: cosign_version_check|bool

- name: "Convert version data"
  set_fact:
    cosign_active_version: "{{ item | json_query(query) }}"
  when: cosign_version_check|bool
  vars:
    query: "json.gitVersion"
  with_items: "{{ cosign_active_version_json.stdout }}"

- include_tasks: "install.yml"