remove signature from dockerhub image

TremoloSecurity · Sep 16, 2024 · 7c38afd · 7c38afd
1 parent 279bea9
commit 7c38afd
Showing 1 changed file with 1 addition and 7 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -91,12 +91,6 @@ jobs:
       - name: sign images
         run: |-
                   cosign sign -y ghcr.io/${{ env.REPO }}:${{ env.TAG }}
-          
-      - uses: anchore/sbom-action@v0
-        with:
-          image: ${{ secrets.OU_CONTAINER_DEST }}:${{ env.TAG }}
-          format: spdx
-          output-file: /tmp/spdxd
 
       - uses: anchore/sbom-action@v0
         with:
@@ -116,4 +110,4 @@ jobs:
 
 
               cosign sign -y ghcr.io/${{ env.REPO }}:sha256-$GH_SBOM_SHA.sbom
-
+