diff --git a/.github/workflows/artifacts.yaml b/.github/workflows/artifacts.yaml index 27505f32..ba949930 100644 --- a/.github/workflows/artifacts.yaml +++ b/.github/workflows/artifacts.yaml @@ -163,10 +163,19 @@ jobs: # path: image.tar - name: Extract OCI tarball + id: extract-oci run: | mkdir -p image tar -xf image.tar -C image + image_name=$(jq -r '.manifests[0].annotations["io.containerd.image.name"]' image/index.json) + image_tag=$(jq -r '.manifests[0].annotations["org.opencontainers.image.ref.name"]' image/index.json) + + echo "Copying $image_tag -> $image_name" + skopeo copy "oci:image:$image_tag" "docker-daemon:$image_name" + + echo "value=$image_name" >> "$GITHUB_OUTPUT" + # - name: List tags # run: skopeo --insecure-policy list-tags oci:image # @@ -202,8 +211,7 @@ jobs: - name: Prepare image fs for scanning run: | - docker load --input image.tar - docker export $(docker create --rm ${{ steps.image-name.outputs.value }}@${{ steps.build.outputs.digest }}) -o docker-image.tar + docker export $(docker create --rm ${{ steps.extract-oci.outputs.value }}) -o docker-image.tar mkdir -p docker-image tar -xf docker-image.tar -C docker-image