fix(ci): adjust syft command and repository reference for signing

Signed-off-by: Jiaxiao (mossaka) Zhou <duibao55328@gmail.com>
Mossaka · Dec 16, 2024 · 28f742d · 28f742d
1 parent 9a59c26
commit 28f742d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
@@ -52,7 +52,7 @@ jobs:
       - name: Create SBOM file
         shell: bash
         run: |
-          syft \
+          sudo syft \
             -o spdx-json \
             --file ${{ inputs.image-name }}-sbom-${{ matrix.arch }}.spdx \
             ghcr.io/${{ env.IMG_REPOSITORY_NAME }}/${{ inputs.image-name }}@${{ env.PLATFORM_DIGEST }}

diff --git a/.github/workflows/sign.yml b/.github/workflows/sign.yml
@@ -33,4 +33,4 @@ jobs:
         run: |
           IMG_REPOSITORY_NAME=$( echo ${{ github.repository }} | awk '{print tolower($0)}' )
           cosign sign --yes \
-            ghcr.io/${{ github.repository }}/${{ inputs.image-name }}@${{ inputs.image-digest }}
+            ghcr.io/${IMG_REPOSITORY_NAME}/${{ inputs.image-name }}@${{ inputs.image-digest }}