From 89f878e3b9447418f48ab20e1502eaf374c383f1 Mon Sep 17 00:00:00 2001 From: "Jose I. Paris" Date: Thu, 19 Mar 2026 16:24:04 +0100 Subject: [PATCH] fix(ci): extract attestation digest from push output instead of wf run describe The wf run describe command lacks authentication support, causing the release workflow to fail. Extract the digest directly from the attestation push JSON output instead. Signed-off-by: Jose I. Paris --- .github/workflows/release.yaml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index d71bc62c9..aa17ef434 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -225,8 +225,7 @@ jobs: env: ATTESTATION_ID: ${{ steps.init_attestation.outputs.attestation_id }} run: | - chainloop attestation push --attestation-id ${{ env.ATTESTATION_ID }} - attestation_sha=$(chainloop wf run describe --id ${{ env.ATTESTATION_ID }} -o json | jq -r '.attestation.digest') + attestation_sha=$(chainloop attestation push --attestation-id ${{ env.ATTESTATION_ID }} -o json | jq -r '.digest') # check that the command succeeded if [ -n "$attestation_sha" ]; then echo "attestation_sha=$attestation_sha" >> $GITHUB_OUTPUT