push sbom fix

nirmata · Jan 23, 2025 · c7dde25 · c7dde25
1 parent 30431de
commit c7dde25
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/reuse.yaml b/.github/workflows/reuse.yaml
@@ -176,7 +176,7 @@ jobs:
       if: ${{ inputs.tag == 'image' && steps.extract_branch.outputs.branch == 'main' }}
       env:
         COSIGN_EXPERIMENTAL: "true"
-        COSIGN_REPOSITORY: "ghcr.io/${{ github.repository_owner }}/signatures"
+        COSIGN_REPOSITORY: "ghcr.io/${{ github.repository_owner }}/${{ github.repository }}/signatures"
       run: |
         cosign sign --yes \
           -a "repo=${{ github.repository }}" \
@@ -201,5 +201,5 @@ jobs:
     - name: Attach SBOM
       if: ${{inputs.tag == 'release'}}
       env:
-        COSIGN_REPOSITORY: "ghcr.io/${{ github.repository_owner }}/sbom"
+        COSIGN_REPOSITORY: "ghcr.io/${{ github.repository_owner }}/${{ github.repository }}/sbom"
       run: cosign attach sbom --sbom ./${{inputs.image_name}}-v*-bom.cdx.json --type cyclonedx  ghcr.io/${{ github.repository_owner }}/${{inputs.image_name}}@sha256:${{ env.digest }}