cartsnitch/auth
12
0
Fork 1
Code Issues 3 Pull Requests Actions Packages Projects Releases Wiki Activity

test(ci): provenance:true/sbom:true OCI referrer probe (CAR-1446 — close after CI run) #54

Closed
Barcode Betty wants to merge 2 commits from car-1446-test-provenance-true into dev
pull from: car-1446-test-provenance-true
merge into: cartsnitch:dev
Conversation 0 Commits 2 Files Changed 1
+2 -2
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yml
+2 -2
View File
@@ -89,8 +89,8 @@ jobs:
# would cause the push to fail on the referrer PUT. The Grype scan step # would cause the push to fail on the referrer PUT. The Grype scan step
# above is the compensating control — it fails the build on any unfixed # above is the compensating control — it fails the build on any unfixed
# high-severity CVE before the image reaches the registry. # high-severity CVE before the image reaches the registry.
provenance: false provenance: true
sbom: false sbom: true
tags: ${{ steps.meta.outputs.tags }} tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }} labels: ${{ steps.meta.outputs.labels }}