diff --git a/.github/workflows/docker-ci-cd.yml b/.github/workflows/docker-ci-cd.yml index 83bf096..d483789 100644 --- a/.github/workflows/docker-ci-cd.yml +++ b/.github/workflows/docker-ci-cd.yml @@ -41,13 +41,13 @@ jobs: cd "${GITHUB_WORKSPACE}/tmp" # Install cosign - curl -Lo cosign https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-${{ matrix.platform-name }} + curl -Lo cosign "https://github.com/sigstore/cosign/releases/latest/download/cosign-linux-amd64" chmod +x cosign mv cosign "${GITHUB_WORKSPACE}/bin/" # Install syft SYFT_RELEASE=$(curl -s https://api.github.com/repos/anchore/syft/releases/latest | grep -o '"tag_name": ".*"' | cut -d'"' -f4) - curl -Lo syft.tar.gz "https://github.com/anchore/syft/releases/download/${SYFT_RELEASE}/syft_${SYFT_RELEASE#v}_linux_${{ matrix.platform-name }}.tar.gz" + curl -Lo syft.tar.gz "https://github.com/anchore/syft/releases/download/${SYFT_RELEASE}/syft_${SYFT_RELEASE#v}_linux_amd64.tar.gz" tar xzf syft.tar.gz syft mv syft "${GITHUB_WORKSPACE}/bin/" @@ -351,7 +351,7 @@ jobs: if: github.event_name != 'pull_request' uses: actions/upload-artifact@v4 with: - name: attestation-results-${{ matrix.platform-name }} + name: attestation-results path: | ${{ env.ATTESTATION_RESULTS_DIR }}/*.json ${{ env.ATTESTATION_RESULTS_DIR }}/*.md @@ -370,7 +370,7 @@ jobs: if: github.event_name != 'pull_request' uses: actions/upload-artifact@v4 with: - name: sbom-files-${{ matrix.platform-name }} + name: sbom-files path: sbom-output/ retention-days: 90