fix gh attestation digest format (#218)

kosli-dev · May 13, 2024 · 785a160 · 785a160
1 parent e9497e8
commit 785a160
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/binary_provenance.yml b/.github/workflows/binary_provenance.yml
@@ -67,7 +67,7 @@ jobs:
           uses: actions/attest-build-provenance@v1
           with:
             subject-name: ${{matrix.artifact.template_name}}
-            subject-digest: ${{ env.FINGERPRINT }}
+            subject-digest: sha256:${{ env.FINGERPRINT }}
 
         - name: Generate SBOM for the binary
           uses: anchore/sbom-action@v0
@@ -87,7 +87,7 @@ jobs:
           with:
             sbom-path: '${{matrix.artifact.template_name}}-sbom.spdx.json'
             subject-path: ${{matrix.artifact.template_name}}
-            subject-digest: ${{ env.FINGERPRINT }}
+            subject-digest: sha256:${{ env.FINGERPRINT }}
 
         - run: cat ${{ steps.sbom-attest.outputs.bundle-path }} || true