ci: Use safer sha256sum instaed of md5sum

Signed-off-by: Víctor Cuadrado Juan <[email protected]>
kubewarden · Oct 11, 2024 · 5f64a17 · 5f64a17
1 parent 17e40a1
commit 5f64a17
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/attestation.yml b/.github/workflows/attestation.yml
@@ -101,12 +101,12 @@ jobs:
           set -e
           crane blob ghcr.io/${{github.repository_owner}}/kubewarden-controller@${{ env.PROVENANCE_DIGEST}} \
             > kubewarden-controller-attestation-${{ matrix.arch }}-provenance.json
-          md5sum kubewarden-controller-attestation-${{ matrix.arch }}-provenance.json \
+          sha256sum kubewarden-controller-attestation-${{ matrix.arch }}-provenance.json \
             >> kubewarden-controller-attestation-${{ matrix.arch }}-checksum.txt
 
           crane blob ghcr.io/${{github.repository_owner}}/kubewarden-controller@${{ env.SBOM_DIGEST}} \
             > kubewarden-controller-attestation-${{ matrix.arch }}-sbom.json
-          md5sum kubewarden-controller-attestation-${{ matrix.arch }}-sbom.json \
+          sha256sum kubewarden-controller-attestation-${{ matrix.arch }}-sbom.json \
             >> kubewarden-controller-attestation-${{ matrix.arch }}-checksum.txt
 
       - name: Sign checksum file