From 21b515b15b240d29cacaa5dfca2945e48129323a Mon Sep 17 00:00:00 2001
From: Steve Wagner <ciroque@live.com>
Date: Wed, 10 May 2023 14:50:12 -0700
Subject: [PATCH] Use sha and ref for upload

---
 .github/workflows/build-and-sign-image.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/build-and-sign-image.yml b/.github/workflows/build-and-sign-image.yml
index a179287a..8adfcaf5 100644
--- a/.github/workflows/build-and-sign-image.yml
+++ b/.github/workflows/build-and-sign-image.yml
@@ -77,3 +77,5 @@ jobs:
         continue-on-error: true
         with:
           sarif_file: 'trivy-results-${{ inputs.image }}.sarif'
+          sha: ${{ github.sha }}
+          ref: ${{ github.ref }}