Update container/sign.yaml

container/sign.yaml

@@ -26,7 +26,7 @@ include:
         echo "Scanning image digest ${digest}"
         skopeo inspect docker://${digest}
         trivy image --output /tmp/image.sbom --format cosign-vuln --ignore-unfixed --severity HIGH,CRITICAL ${digest}
-        cosign attest -y --key  hashivault://cosign --predicate /tmp/image.sbom ${digest}
+        cosign attest -y --key  hashivault://cosign --predicate /tmp/image.sbom --type=vuln ${digest}
         cosign attach sbom --sbom /tmp/image.sbom ${digest}
       done