Skip to content

Conversation

@mattmoor
Copy link
Member

Currently the env var is ignored by this command because it directly uses GGCR registry options instead of the ociremote options (which include the default override).

This fixes things by passing the ociremote options from regOpts to SBOMTag.

Signed-off-by: Matt Moore [email protected]

Thanks to @vaikas for finding this.

Ticket Link

Release Note

Fixes COSIGN_REPOSITORY with `cosign attach sbom`

Currently the env var is ignored by this command because it directly uses GGCR registry options instead of the `ociremote` options (which include the default override).

This fixes things by passing the `ociremote` options from `regOpts` to `SBOMTag`.

Signed-off-by: Matt Moore <[email protected]>
@vaikas
Copy link
Contributor

vaikas commented Oct 29, 2021

Thanks!
/lgtm

@mattmoor mattmoor merged commit 51803c2 into sigstore:main Oct 29, 2021
@mattmoor mattmoor deleted the fix-attach-sbom-cosign-repository branch October 29, 2021 18:23
@github-actions github-actions bot added this to the v1.3.0 milestone Oct 29, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants