File tree Expand file tree Collapse file tree 1 file changed +2
-15
lines changed
Expand file tree Collapse file tree 1 file changed +2
-15
lines changed Original file line number Diff line number Diff line change @@ -114,23 +114,10 @@ jobs:
114114 # exclude latest tag
115115 if [[ $entry != *latest ]]; then
116116 material_name="$(echo $entry | sed 's#.*/##')"
117-
118- # Extract repo name (component after last slash, before colon)
119- repo_name="$(echo $entry | sed 's#.*/##' | sed 's#:.*##')"
120-
121- # Extract tag and architecture from the entry
122- tag_with_arch="$(echo $entry | sed 's#.*:##')"
123-
124- # Extract just the architecture (after the last dash)
125- arch="$(echo $tag_with_arch | sed 's#.*-##')"
126-
127- # Create attestation names (without version or colon)
128- container_name="${repo_name}-${arch}"
129- sbom_name="${repo_name}-sbom-${arch}"
130117
131118 syft -o cyclonedx-json=/tmp/sbom-$material_name.cyclonedx.json $entry
132- chainloop attestation add --name $container_name -- value $entry --kind CONTAINER_IMAGE --attestation-id ${{ env.ATTESTATION_ID }}
133- chainloop attestation add --name $sbom_name -- value /tmp/sbom-$material_name.cyclonedx.json --kind SBOM_CYCLONEDX_JSON --attestation-id ${{ env.ATTESTATION_ID }}
119+ chainloop attestation add --value $entry --kind CONTAINER_IMAGE --attestation-id ${{ env.ATTESTATION_ID }}
120+ chainloop attestation add --value /tmp/sbom-$material_name.cyclonedx.json --kind SBOM_CYCLONEDX_JSON --attestation-id ${{ env.ATTESTATION_ID }}
134121
135122 # Upload the SBOM to the release
136123 gh release upload ${{ github.ref_name }} /tmp/sbom-$material_name.cyclonedx.json --clobber
You can’t perform that action at this time.
0 commit comments