Skip to content

Commit

Permalink
Multi-build manifests
Browse files Browse the repository at this point in the history
  • Loading branch information
zx8086 committed Jan 20, 2025
1 parent 981e5c1 commit 4c966bb
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions .github/workflows/docker-ci-cd.yml
Original file line number Diff line number Diff line change
Expand Up @@ -41,13 +41,13 @@ jobs:
cd "${GITHUB_WORKSPACE}/tmp"
# Install cosign
curl -Lo cosign https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-${{ matrix.platform-name }}
curl -Lo cosign "https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64"
chmod +x cosign
mv cosign "${GITHUB_WORKSPACE}/bin/"
# Install syft
SYFT_RELEASE=$(curl -s https://api.github.com/repos/anchore/syft/releases/latest | grep -o '"tag_name": ".*"' | cut -d'"' -f4)
curl -Lo syft.tar.gz "https://github.com/anchore/syft/releases/download/${SYFT_RELEASE}/syft_${SYFT_RELEASE#v}_linux_${{ matrix.platform-name }}.tar.gz"
curl -Lo syft.tar.gz "https://github.com/anchore/syft/releases/download/${SYFT_RELEASE}/syft_${SYFT_RELEASE#v}_linux_amd64.tar.gz"
tar xzf syft.tar.gz syft
mv syft "${GITHUB_WORKSPACE}/bin/"
Expand Down Expand Up @@ -351,7 +351,7 @@ jobs:
if: github.event_name != 'pull_request'
uses: actions/upload-artifact@v4
with:
name: attestation-results-${{ matrix.platform-name }}
name: attestation-results
path: |
${{ env.ATTESTATION_RESULTS_DIR }}/*.json
${{ env.ATTESTATION_RESULTS_DIR }}/*.md
Expand All @@ -370,7 +370,7 @@ jobs:
if: github.event_name != 'pull_request'
uses: actions/upload-artifact@v4
with:
name: sbom-files-${{ matrix.platform-name }}
name: sbom-files
path: sbom-output/
retention-days: 90

Expand Down

0 comments on commit 4c966bb

Please sign in to comment.