fix(release): don't attest archives (#1749)

Signed-off-by: Jose I. Paris <[email protected]>
chainloop-dev · Jan 23, 2025 · 98b08b7 · 98b08b7
1 parent a073c88
commit 98b08b7
Showing 1 changed file with 0 additions and 8 deletions.
diff --git a/.github/workflows/build_and_package.yaml b/.github/workflows/build_and_package.yaml
@@ -108,14 +108,6 @@ jobs:
             chainloop attestation add --value $entry --kind CONTAINER_IMAGE --attestation-id ${{ env.ATTESTATION_ID }}
             chainloop attestation add --value /tmp/sbom.cyclonedx.json --attestation-id ${{ env.ATTESTATION_ID }}
           done
-          
-          # Attest CLI archives
-          archives=$(cat dist/artifacts.json | jq -r '.[] | select(.type=="Archive") | .path')
-          for entry in $archives; do
-            syft -o cyclonedx-json=/tmp/sbom.cyclonedx.json $entry
-            chainloop attestation add --value $entry --attestation-id ${{ env.ATTESTATION_ID }}
-            chainloop attestation add --value /tmp/sbom.cyclonedx.json --attestation-id ${{ env.ATTESTATION_ID }}
-          done
 
       - name: Bump Chart and Dagger Version
         run: .github/workflows/utils/bump-chart-and-dagger-version.sh deployment/chainloop extras/dagger ${{ github.ref_name }}