From 7acea36a5b028b6718f3069badc4d10da9ba4b60 Mon Sep 17 00:00:00 2001 From: Robert Kielty Date: Wed, 27 Nov 2024 12:23:24 +0000 Subject: [PATCH] fixes image ref for verify-attestation Signed-off-by: Robert Kielty --- .github/workflows/publish-image.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish-image.yml b/.github/workflows/publish-image.yml index b08e2b8..ef644e0 100644 --- a/.github/workflows/publish-image.yml +++ b/.github/workflows/publish-image.yml @@ -209,5 +209,5 @@ jobs: IMAGE_NAME: ${{ needs.build.outputs.image }} IMAGE_DIGEST: ${{ needs.build.outputs.digest }} run: | - COSIGN_EXPERIMENTAL=1 cosign verify-attestation --certificate-identity-regexp=".*" --certificate-oidc-issuer-regexp=".*" --type slsaprovenance "${IMAGE_NAME}@${IMAGE_DIGEST}" + COSIGN_EXPERIMENTAL=1 cosign verify-attestation --certificate-identity-regexp=".*" --certificate-oidc-issuer-regexp=".*" --type slsaprovenance "${{ env.IMAGE_NAME }}@${{env.IMAGE_DIGEST}}" # TODO(github.com/slsa-framework/slsa-verifier/issues/92): Add step to verify using slsa-verifier \ No newline at end of file