Use SKIPSAME conflict for cosign_attest (#21)

This will be present in v0.0.16 of tf-cosign. Signed-off-by: Jon Johnson <[email protected]>
chainguard-dev · Oct 14, 2023 · f3f4c7e · f3f4c7e
1 parent c8c4808
commit f3f4c7e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -38,6 +38,9 @@ resource "cosign_attest" "this" {
 
   image = apko_build.this.sboms[each.key].digest
 
+  # Do not re-attest things that have not changed.
+  conflict = "SKIPSAME"
+
   # Create SBOM attestations for each architecture.
   predicates {
     type = apko_build.this.sboms[each.key].predicate_type