Skip to content

Commit

Permalink
pass a filename
Browse files Browse the repository at this point in the history
  • Loading branch information
jhrozek committed Feb 12, 2024
1 parent 2995404 commit 6323aa7
Showing 1 changed file with 1 addition and 7 deletions.
8 changes: 1 addition & 7 deletions .github/workflows/build-image-signed-ghat.yml
Original file line number Diff line number Diff line change
Expand Up @@ -39,17 +39,11 @@ jobs:
syft scan registry:ghcr.io/${{ github.repository }}:latest -o json > sbom.json
cat sbom.json
- name: Read SBOM into environment variable
id: sbom-read
run: |
SBOM_CONTENTS=$(cat sbom.json | base64)
echo "SBOM_CONTENTS=${SBOM_CONTENTS}" >> $GITHUB_ENV
- name: Attest image
uses: jhrozek/generate-build-provenance@add_sbom
with:
subject-name: ghcr.io/${{ github.repository }}
subject-digest: ${{ steps.push-step.outputs.digest }}
push-to-registry: true
env:
SBOM_CONTENTS: ${{ env.SBOM_CONTENTS }}
SBOM_FILE_PATH: sbom.json

0 comments on commit 6323aa7

Please sign in to comment.