Merge pull request #27 from RobertKielty/fix-cosign-error

fixes image ref for verify-attestation
cncf · Nov 27, 2024 · aa2b883 · aa2b883
2 parents 84460e8 + 7acea36
commit aa2b883
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/publish-image.yml b/.github/workflows/publish-image.yml
@@ -209,5 +209,5 @@ jobs:
           IMAGE_NAME: ${{ needs.build.outputs.image }}
           IMAGE_DIGEST: ${{ needs.build.outputs.digest }}
         run: |
-          COSIGN_EXPERIMENTAL=1 cosign verify-attestation --certificate-identity-regexp=".*" --certificate-oidc-issuer-regexp=".*" --type slsaprovenance "${IMAGE_NAME}@${IMAGE_DIGEST}"
+          COSIGN_EXPERIMENTAL=1 cosign verify-attestation --certificate-identity-regexp=".*" --certificate-oidc-issuer-regexp=".*" --type slsaprovenance "${{ env.IMAGE_NAME }}@${{env.IMAGE_DIGEST}}"
       # TODO(github.com/slsa-framework/slsa-verifier/issues/92): Add step to verify using slsa-verifier