From 4c8e3b76c7db60f70efc3fe78ebdc96aeec2d871 Mon Sep 17 00:00:00 2001
From: Pascal Holthaus <94793111+pascalholthaus@users.noreply.github.com>
Date: Fri, 27 Mar 2026 03:09:49 +0100
Subject: [PATCH] Change: use container digest for sbom not tag in
 automatix-service.yml

---
 .github/workflows/automatix-service.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/automatix-service.yml b/.github/workflows/automatix-service.yml
index 6c27cd1..c525011 100644
--- a/.github/workflows/automatix-service.yml
+++ b/.github/workflows/automatix-service.yml
@@ -94,7 +94,7 @@ jobs:
     needs: digest
     uses: greenbone/workflows/.github/workflows/generate-and-push-sbom-with-trivy-3rd-gen.yml@main
     with:
-      image-url: "${{ inputs.url }}:${{ inputs.tag }}"
+      image-url: "${{ inputs.url }}@${{ needs.digest.outputs.digest }}"
       image-registry-username-secret-name: "GREENBONE_REGISTRY_USER"
       image-registry-password-secret-name: "GREENBONE_REGISTRY_TOKEN"
       output-file-name: "${{ needs.digest.outputs.name }}.${{ inputs.tag }}.sbom.json"