From 785a160b7f0e566754f3bd66c8f145671c396220 Mon Sep 17 00:00:00 2001 From: Sami Alajrami Date: Mon, 13 May 2024 09:19:47 +0200 Subject: [PATCH] fix gh attestation digest format (#218) --- .github/workflows/binary_provenance.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/binary_provenance.yml b/.github/workflows/binary_provenance.yml index c4c4e6a18..94b8047b5 100644 --- a/.github/workflows/binary_provenance.yml +++ b/.github/workflows/binary_provenance.yml @@ -67,7 +67,7 @@ jobs: uses: actions/attest-build-provenance@v1 with: subject-name: ${{matrix.artifact.template_name}} - subject-digest: ${{ env.FINGERPRINT }} + subject-digest: sha256:${{ env.FINGERPRINT }} - name: Generate SBOM for the binary uses: anchore/sbom-action@v0 @@ -87,7 +87,7 @@ jobs: with: sbom-path: '${{matrix.artifact.template_name}}-sbom.spdx.json' subject-path: ${{matrix.artifact.template_name}} - subject-digest: ${{ env.FINGERPRINT }} + subject-digest: sha256:${{ env.FINGERPRINT }} - run: cat ${{ steps.sbom-attest.outputs.bundle-path }} || true