Decouple push and save

Signed-off-by: John Kjell <john@testifysec.com>
testifysec · Nov 9, 2023 · d5aa330 · d5aa330
1 parent 6ed8355
commit d5aa330
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml
@@ -27,6 +27,7 @@ jobs:
       attestations: "git github environment"
       command: go vet ./...
 
+  # --ignore DL3002    
   lint:
     uses: ./.github/workflows/witness.yml
     with:
@@ -109,9 +110,9 @@ jobs:
       uses: testifysec/witness-run-action@40aa4ef36fc431a37de7c3faebcb66513c03b934
       with:
         step: build-image
-        attestations: "git github environment oci"
+        attestations: "git github environment"
         command: |
-          /bin/sh -c "docker buildx build -t ${{ steps.meta.outputs.tags }} --push . && docker buildx build ${{ steps.meta.outputs.tags }} -o type=docker,dest=- . > image.tar"
+          /bin/sh -c "docker buildx build -t ${{ steps.meta.outputs.tags }} --push ."
     outputs:
       tags: ${{ steps.meta.outputs.tags }}