attest spdxjson

exoscale · Mar 1, 2024 · 6de21f6 · 6de21f6
1 parent facfe2f
commit 6de21f6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/sscs.yaml b/.github/workflows/sscs.yaml
@@ -59,12 +59,12 @@ jobs:
       - name: attach attestation
         shell: bash
         run: |
-          cosign attest --yes --predicate sbom.json exoscale/csi-driver-integ-test:sscs
+          cosign attest --yes --type spdxjson --predicate sbom.json exoscale/csi-driver-integ-test:sscs
 
       - name: verify the sbom attestation
         shell: bash
         run: |
-          cosign verify-attestation exoscale/csi-driver-integ-test:sscs --certificate-identity=https://github.com/exoscale/exoscale-csi-driver/.github/workflows/sscs.yaml@refs/heads/philippsauter/sscs --certificate-oidc-issuer=https://token.actions.githubusercontent.com
+          cosign verify-attestation exoscale/csi-driver-integ-test:sscs --certificate-identity=https://github.com/exoscale/exoscale-csi-driver/.github/workflows/sscs.yaml@refs/heads/philippsauter/sscs --certificate-oidc-issuer=https://token.actions.githubusercontent.com > /dev/null
 
       - name: Scan image
         uses: anchore/scan-action@v3