Closed davidmytton closed 3 months ago
Do you have the packages: write
permission set for your workflow? This is necessary to push the attestation to the registry.
Yeah I have packages: write
Enabling step debug logging may give us some additional information about what is failing here.
My guess is that the attest action is not able to locate the image with the specified name/digest and is failing when trying to make the association in the registry.
@davidmytton any luck with this? We've released a new version of the action with some improvements which may solve the issue you were having pushing the attestation to the GHCR registry. Going to close this issue, but feel free to re-open if you continue to experience problems.
After successfully generating an SBOM and then attesting it, this action fails to upload the artifact with a generic error:
Error uploading artifact to container registry
Here's the action log (IDs redacted):
I can view the attestation from the web UI and the image has been published to the registry. The attestation is not linked, but I can download it from the workflow summary.