ci: workaround Syft overwriting COSIGN_PASSWORD

edgelesssys · Feb 2, 2023 · 350ccb2 · 350ccb2
1 parent 093607f
commit 350ccb2
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/actions/container_sbom/action.yml b/.github/actions/container_sbom/action.yml
@@ -31,6 +31,7 @@ runs:
         COSIGN_PUBLIC_KEY: ${{ inputs.cosignPublicKey }}
         COSIGN_PRIVATE_KEY: ${{ inputs.cosignPrivateKey }}
         COSIGN_PASSWORD: ${{ inputs.cosignPassword }}
+        SYFT_ATTEST_PASSWORD: ${{ inputs.cosignPassword }} # Required for Syft 0.69.0+ as they overwrite COSIGN_PASSWORD
       run: |
         set -ex
         echo "$COSIGN_PRIVATE_KEY" > cosign.key