We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent bf58dff commit 3130cebCopy full SHA for 3130ceb
.github/workflows/docker-build.yml
@@ -120,7 +120,7 @@ jobs:
120
for tag in ${TAGS}; do
121
image="${tag}@${DIGEST}"
122
cosign sign --recursive --yes --key "${COSIGN_PRIVATE_KEY}" "${image}"
123
- cosign attest --recursive --yes --key "${COSIGN_PRIVATE_KEY}" --predicate "middleware-sbom.spdx.json" --type="spdxjson" "${image}"
+ cosign attest --yes --key "${COSIGN_PRIVATE_KEY}" --predicate "middleware-sbom.spdx.json" --type="spdxjson" "${image}"
124
done
125
env:
126
TAGS: |
0 commit comments