Closed dervoeti closed 1 month ago
The second invocation of cosign attest currently attaches the SBOM to the image in docker.stackable.tech instead of the one in oci.stackable.tech, because IMAGE_NAME was not overridden in that step.
cosign attest
IMAGE_NAME
The second invocation of
cosign attestcurrently attaches the SBOM to the image in docker.stackable.tech instead of the one in oci.stackable.tech, becauseIMAGE_NAMEwas not overridden in that step.