From 80a56a137aeb2460664fb08d631aec0107b411d9 Mon Sep 17 00:00:00 2001
From: Till Wegmueller <toasterson@gmail.com>
Date: Sat, 29 Nov 2025 20:45:04 +0100
Subject: [PATCH] fix: extract manifest digest correctly for attestation

---
 .github/workflows/release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a1514c7..0217205 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -113,7 +113,7 @@ jobs:
 
           # Get the digest of the first tag (version tag) for attestation
           FIRST_TAG=$(echo '${{ steps.meta.outputs.tags }}' | head -n1)
-          DIGEST=$(docker buildx imagetools inspect ${FIRST_TAG} --format '{{.Manifest.Digest}}')
+          DIGEST=$(docker buildx imagetools inspect ${FIRST_TAG} --raw | sha256sum | cut -d' ' -f1 | awk '{print "sha256:" $0}')
           echo "digest=${DIGEST}" >> $GITHUB_OUTPUT
 
       - name: Generate artifact attestation