diff --git a/.github/workflows/contracts/chainloop-vault-release.yaml b/.github/workflows/contracts/chainloop-vault-release.yaml index b5484136d..194653a74 100644 --- a/.github/workflows/contracts/chainloop-vault-release.yaml +++ b/.github/workflows/contracts/chainloop-vault-release.yaml @@ -11,6 +11,8 @@ spec: with: requirement_name: sbom-compliance gate: true + attestation_phases: + - INIT - ref: source-commit with: check_signature: yes