chore: debug docker

Author: mchmarny

.github/actions/sbom-and-attest/action.yml

@@ -101,6 +101,18 @@ runs:
         echo "sbom_file=$SBOM_FILE" >> "$GITHUB_OUTPUT"
         echo "::endgroup::"
 
+    - name: Install Crane
+      shell: bash
+      run: |
+        if ! command -v crane &> /dev/null; then
+          echo "Installing crane..."
+          CRANE_VERSION="v0.20.2"
+          curl -sL "https://github.com/google/go-containerregistry/releases/download/${CRANE_VERSION}/go-containerregistry_Linux_x86_64.tar.gz" | tar -xz crane
+          sudo mv crane /usr/local/bin/crane
+          sudo chmod +x /usr/local/bin/crane
+        fi
+        crane version
+
     - name: Install Cosign
       uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad  # v4.0.0
 
@@ -164,7 +176,7 @@ runs:
               --yes \
               --predicate "$SBOM_FILE" \
               --type cyclonedx \
-              --verbose=9 \
+              --verbose \
               "${{ inputs.image_name }}@${DIGEST}" 2>&1 | tee /tmp/cosign-output.log; then
               echo "✓ Successfully attested $DIGEST"
               grep -i "pushing\|uploaded\|tlog" /tmp/cosign-output.log || echo "Warning: No upload confirmation in output"
@@ -180,7 +192,7 @@ runs:
             --yes \
             --predicate "$SBOM_FILE" \
             --type cyclonedx \
-            --verbose=9 \
+            --verbose \
             "$IMAGE_REF" 2>&1 | tee /tmp/cosign-output.log; then
             echo "✓ Successfully attested image"
             grep -i "pushing\|uploaded\|tlog" /tmp/cosign-output.log || echo "Warning: No upload confirmation in output"