File tree Expand file tree Collapse file tree 1 file changed +3
-7
lines changed
Expand file tree Collapse file tree 1 file changed +3
-7
lines changed Original file line number Diff line number Diff line change @@ -109,13 +109,9 @@ jobs:
109109 for entry in $images; do
110110 # exclude latest tag
111111 if [[ $entry != *latest ]]; then
112- # Extract only the image name and the architecture on the tag
113- repo="${entry%:*}" # Remove tag
114- repo="${repo##*/}" # Extract last segment after the last '/'
115- material_name="${repo}-${entry##*-}" # Construct final name
116- syft -o cyclonedx-json=/tmp/sbom-$material_name.cyclonedx.json $entry
117- chainloop attestation add --value $entry --attestation-id ${{ env.ATTESTATION_ID }}
118- chainloop attestation add --value /tmp/sbom-$material_name.cyclonedx.json --attestation-id ${{ env.ATTESTATION_ID }}
112+ syft -o cyclonedx-json=/tmp/sbom.cyclonedx.json $entry
113+ chainloop attestation add --value $entry --kind CONTAINER_IMAGE --attestation-id ${{ env.ATTESTATION_ID }}
114+ chainloop attestation add --value /tmp/sbom.cyclonedx.json --attestation-id ${{ env.ATTESTATION_ID }}
119115
120116 # Upload the SBOM to the release
121117 gh release upload ${{ github.ref_name }} /tmp/sbom-$material_name.cyclonedx.json --clobber
You can’t perform that action at this time.
0 commit comments