We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 43c1603 commit 2b125ffCopy full SHA for 2b125ff
1 file changed
scripts/verify_release.sh
@@ -122,7 +122,7 @@ fi
122
123
printf "[5/5] Inspecting SBOM integrity metadata...\n"
124
ARTIFACT_DIGEST=$("${SHA_CMD[@]}" "$ARTIFACT" | awk '{print $1}')
125
-SBOM_DIGEST=$(jq -r '.metadata.component.hashes[]? | select((.alg // .algorithm | ascii_uppercase) == "SHA-256") | .content' "$SBOM" | head -n 1)
+SBOM_DIGEST=$(jq -r '.metadata.component.hashes[]? | select((.alg // .algorithm | ascii_upcase) == "SHA-256") | .content' "$SBOM" | head -n 1)
126
if [[ -n "$SBOM_DIGEST" ]]; then
127
if [[ "$ARTIFACT_DIGEST" != "$SBOM_DIGEST" ]]; then
128
echo "warning: SBOM embedded digest ($SBOM_DIGEST) does not match artifact digest ($ARTIFACT_DIGEST)" >&2
0 commit comments