fix(sbom): attest digest instead of tag
Presentation
for multi-platform manifest, it puts the attestation on the actual (amd64) image instead of its manifest
Fixes #144 (closed)
Checklist
- Tested & examplified:
Edited by Clement Bois
for multi-platform manifest, it puts the attestation on the actual (amd64) image instead of its manifest
Fixes #144 (closed)