fix: image publish ci (#142)

* fix: image publish ci

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* fix: more changes

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

* feat: remove debug

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

---------

Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>

.github/actions/publish-image/action.yaml

@@ -50,6 +50,7 @@ runs:
       env:
         REGISTRY: ${{ inputs.registry }}
         REPO: ${{ inputs.repository }}
+        REGISTRY_USERNAME: ${{ inputs.registry-username }}
         REGISTRY_PASSWORD: ${{ inputs.registry-password }}
         COSIGN_REPOSITORY: ${{ inputs.sbom-repository }}
       run: |

.github/workflows/publish-images.yaml

@@ -56,8 +56,8 @@ jobs:
           version: ${{ github.ref_name }}
           sign-image: true
           sbom-name: reports-server
-          sbom-repository: ghcr.io/${{ github.repository_owner }}/sbom
-          signature-repository: ghcr.io/${{ github.repository_owner }}/signatures
+          sbom-repository: ghcr.io/${{ github.repository_owner }}/reports-server/sbom
+          signature-repository: ghcr.io/${{ github.repository_owner }}/reports-server/signatures
           main-path: .
   generate-reports-server-provenance:
     needs: publish-images
@@ -72,4 +72,4 @@ jobs:
       digest: "${{ needs.publish-images.outputs.reports-server-digest }}"
       registry-username: ${{ github.actor }}
     secrets:
-      registry-password: ${{ secrets.GITHUB_TOKEN }}
+      registry-password: ${{ secrets.GITHUB_TOKEN }}

Makefile

@@ -227,4 +227,4 @@ ko-login: $(KO)
 .PHONY: ko-publish-reports-server
 ko-publish-reports-server: ko-login ## Build and publish reports-server image (with ko)
 	@LD_FLAGS=$(LD_FLAGS) KOCACHE=$(KOCACHE) KO_DOCKER_REPO=$(REPO_REPORTS_SERVER) \
-		$(KO) build . --bare --tags=$(KO_TAGS) --platform=$(PLATFORMS)
+		$(KO) build . --bare --tags=$(KO_TAGS) --platform=$(PLATFORMS)