Skip to content

Commit

Permalink
remove extra path
Browse files Browse the repository at this point in the history
  • Loading branch information
mlbiam committed Sep 24, 2024
1 parent f698d33 commit 3200cd3
Showing 1 changed file with 8 additions and 8 deletions.
16 changes: 8 additions & 8 deletions .github/workflows/dockerbuild.yml
Original file line number Diff line number Diff line change
Expand Up @@ -52,25 +52,25 @@ jobs:
push: true
platforms: linux/amd64,linux/arm64
tags: |
ghcr.io/${{ env.REPO }}/openunison-jib-builder3:latest
ghcr.io/${{ env.REPO }}/openunison-jib-builder3:${{ env.TAG }}
ghcr.io/${{ env.REPO }}/openunison-jib-builder3:${{ env.SHORT_TAG }}
ghcr.io/${{ env.REPO }}:latest
ghcr.io/${{ env.REPO }}:${{ env.TAG }}
ghcr.io/${{ env.REPO }}:${{ env.SHORT_TAG }}


- name: sign images
run: |-
cosign sign -y ghcr.io/${{ env.REPO }}/openunison-jib-builder3:${{ env.TAG }}
cosign sign -y ghcr.io/${{ env.REPO }}:${{ env.TAG }}
- uses: anchore/sbom-action@v0
with:
image: ghcr.io/${{ env.REPO }}/openunison-jib-builder3:${{ env.TAG }}
image: ghcr.io/${{ env.REPO }}:${{ env.TAG }}
format: spdx
output-file: /tmp/spdxg

- name: attach sbom to images
run: |-
cosign attach sbom --sbom /tmp/spdxg ghcr.io/${{ env.REPO }}/openunison-jib-builder3:${{ env.TAG }}
GH_SBOM_SHA=$(cosign verify --certificate-oidc-issuer-regexp='.*' --certificate-identity-regexp='.*' ghcr.io/${{ env.REPO }}/openunison-jib-builder3:${{ env.TAG }} 2>/dev/null | jq -r '.[0].critical.image["docker-manifest-digest"]' | cut -c 8-)
cosign attach sbom --sbom /tmp/spdxg ghcr.io/${{ env.REPO }}:${{ env.TAG }}
GH_SBOM_SHA=$(cosign verify --certificate-oidc-issuer-regexp='.*' --certificate-identity-regexp='.*' ghcr.io/${{ env.REPO }}:${{ env.TAG }} 2>/dev/null | jq -r '.[0].critical.image["docker-manifest-digest"]' | cut -c 8-)
echo "GH_SBOM_SHA: $GH_SBOM_SHA"
cosign sign -y ghcr.io/${{ env.REPO }}/openunison-jib-builder3:sha256-$GH_SBOM_SHA.sbom
cosign sign -y ghcr.io/${{ env.REPO }}:sha256-$GH_SBOM_SHA.sbom

0 comments on commit 3200cd3

Please sign in to comment.