cosign help attach sbom

Attach sbom to the supplied container image

Options

NameDescription
--output-file <output-file>Log output to a file
--timeout, -t <timeout>Timeout for commands
--verbose, -dLog debug output
--allow-insecure-registryWhether to allow insecure connections to registries. Don't use this for anything but testing
--attachment-tag-prefix <attachment-tag-prefix>Optional custom prefix to use for attached image tags. Attachment images are tagged as: `[AttachmentTagPrefix]sha256-[TargetImageDigest].[AttachmentName]`
--k8s-keychainWhether to use the kubernetes keychain instead of the default keychain (supports workload identity)
--sbom <sbom>Path to the sbom, or {-} for stdin
--type <type>Type of sbom (spdx|cyclonedx|syft)
--help, -hHelp for sbom