From 17a2b98b24ed70d9f27f5acd687a3800e3c8e333 Mon Sep 17 00:00:00 2001 From: Kjeld Schouten Date: Wed, 9 Apr 2025 13:07:38 +0200 Subject: [PATCH] fix(ci): correct attestation path --- .github/workflows/containers.build.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/containers.build.yaml b/.github/workflows/containers.build.yaml index f7b6f8d4332..333c1bb4ba7 100644 --- a/.github/workflows/containers.build.yaml +++ b/.github/workflows/containers.build.yaml @@ -316,7 +316,7 @@ jobs: - name: Verify SBOM attestation if: github.event_name != 'pull_request' && steps.generate_sbom.outcome == 'success' run: | - cosign verify-attestation quay.io/tccr/${{ matrix.container }}@${{ steps.push.outputs.digest }} --type https://spdx.dev/Document --certificate-oidc-issuer=https://token.actions.githubusercontent.com --certificate-identity=https://github.com/truecharts/containers/.github/workflows/containers.build.yaml@refs/heads/master | jq '.payload |= @base64d | .payload | fromjson' + cosign verify-attestation quay.io/tccr/${{ matrix.container }}@${{ steps.push.outputs.digest }} --type https://spdx.dev/Document --certificate-oidc-issuer=https://token.actions.githubusercontent.com --certificate-identity=https://github.com/truecharts/public/.github/workflows/containers.build.yaml@refs/heads/master | jq '.payload |= @base64d | .payload | fromjson' - name: Generate provenance id: gen-prov @@ -346,7 +346,7 @@ jobs: if: github.event_name != 'pull_request' id: verf-prov run: | - cosign verify-attestation quay.io/tccr/${{ matrix.container }}@${{ steps.push.outputs.digest }} --type slsaprovenance --certificate-oidc-issuer=https://token.actions.githubusercontent.com --certificate-identity=https://github.com/truecharts/containers/.github/workflows/containers.build.yaml@refs/heads/master | jq '.payload |= @base64d | .payload | fromjson' + cosign verify-attestation quay.io/tccr/${{ matrix.container }}@${{ steps.push.outputs.digest }} --type slsaprovenance --certificate-oidc-issuer=https://token.actions.githubusercontent.com --certificate-identity=https://github.com/truecharts/public/.github/workflows/containers.build.yaml@refs/heads/master | jq '.payload |= @base64d | .payload | fromjson' env: COSIGN_EXPERIMENTAL: 1