search

chainguard-images / .github

1 stars 10 forks source link

README Update: change cosign download flag to '--predicate-type' #34

Closed tdunlap607 closed 9 months ago

tdunlap607 commented 1 year ago

From the GitHub chainguard-images README page, the cosign download attestation command doesn’t work in the example. The flag --type should be --predicate-type

From the latest cosign version of 2.1.1:

$ cosign download attestation --help
Download in-toto attestations from the supplied container image

Usage:
cosign download attestation [flags]

Examples:
  cosign download attestation <image uri> [--predicate-type]

Flags:
...

    --predicate-type='':
    download attestation with matching predicateType
...
$ cosign download attestation --type https://spdx.dev/Document --platform linux/amd64 cgr.dev/chainguard/nginx | jq -r .payload | base64 -d | jq
Error: unknown flag: --type
main.go:74: error during command execution: unknown flag: --type