fix workflows/release.yml file upload

codefresh-io · Aug 21, 2023 · 9f3cc0f · 9f3cc0f
1 parent 54183a9
commit 9f3cc0f
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -142,7 +142,7 @@ jobs:
       - uses: actions/download-artifact@v3
         with:
           name: sbom.tar.gz
-          path: dist/
+          path: /tmp
 
       - name: Registry Login
         uses: docker/login-action@v2
@@ -172,7 +172,7 @@ jobs:
         run: |
           cosign sign -y quay.io/${{ secrets.QUAYIO_ORG }}/argo-events@$IMAGE_DIGEST
           cosign sign-blob -y ./dist/argo-events-checksums.txt > ./dist/argo-events-checksums.sig
-          cosign sign-blob -y ./dist/sbom.tar.gz > ./dist/sbom.tar.gz.sig
+          cosign sign-blob -y /tmp/sbom.tar.gz > /tmp/sbom.tar.gz.sig
 
       - name: Release binaries
         uses: softprops/action-gh-release@v1
@@ -183,7 +183,7 @@ jobs:
             dist/argo-events-checksums.txt
             dist/argo-events-checksums.sig
             manifests/*.yaml
-            dist/sbom.tar.gz
-            dist/sbom.tar.gz.sig
+            /tmp/sbom.tar.gz
+            /tmp/sbom.tar.gz.sig
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}