Mirrors/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft synced 2024-11-10 06:14:16 +00:00
Code Issues Projects Releases Packages Wiki Activity

Update README.md (#772)

Browse source 
Update `Example attest`

Signed-off-by: Idan Frimark <idanf@cisco.com>
This commit is contained in:
Idan Frimark 2022-01-27 21:59:36 +02:00 committed by GitHub
parent d7a23e4bb2
commit ed1cbf50d9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
README.md
View file

@ -425,9 +425,9 @@ Note for the following example replace `test/image:latest` with an image you own
its remote reference. Replace $MY_PRIVATE_KEY with a private key you own or have generated with cosign.
```bash
cosign sign -key $MY_PRIVATE_KEY test/image:latest
cosign sign --key $MY_PRIVATE_KEY test/image:latest
syft test/image:latest -o json > test_latest_sbom.json
cosign attest -predicate test_latest_sbom.json -key $MY_PRIVATE_KEY
cosign attest --predicate test_latest_sbom.json --key $MY_PRIVATE_KEY test/image:latest
```
Verify the new attestation exists on your image