upload sigstore bundle as an artifact (#220)

kosli-dev · May 13, 2024 · 5c0bcb8 · 5c0bcb8
1 parent 33b6d75
commit 5c0bcb8
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/.github/workflows/binary_provenance.yml b/.github/workflows/binary_provenance.yml
@@ -88,8 +88,12 @@ jobs:
             sbom-path: '${{matrix.artifact.template_name}}-sbom.spdx.json'
             subject-name: ${{matrix.artifact.template_name}}
             subject-digest: sha256:${{ env.FINGERPRINT }}
-
-        - run: cat ${{ steps.sbom-attest.outputs.bundle-path }} || true
+
+        - uses: actions/upload-artifact@v4
+          with:
+            name: sbom-attest-jsonl-bundle
+            path: ${{ steps.sbom-attest.outputs.bundle-path }}
+            retention-days: 1
 
         - name: Report artifact to Kosli
           env: