fix: use sigstore icon instead of the key one

stacklok · Apr 26, 2024 · 0eb11d1 · 0eb11d1
1 parent bf48970
commit 0eb11d1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/trustyapi/trustyapi.go b/pkg/trustyapi/trustyapi.go
@@ -162,7 +162,7 @@ func ProcessDependency(dep string, ecosystem string, scoreThreshold float64) (st
 
 	// write provenance information
 	if result.Provenance.Description.Provenance.Issuer != "" {
-		reportBuilder.WriteString("### :key: Proof of origin (Provenance):\n")
+		reportBuilder.WriteString("### ![Sigstore](https://www.trustypkg.dev/icons/sigstore-horizontal.svg) Proof of origin (Provenance):\n")
 		reportBuilder.WriteString("Built and signed with sigstore using GitHub Actions.\n")
 		reportBuilder.WriteString(fmt.Sprintf("· Source repo: `%s`\n", result.Provenance.Description.Provenance.SourceRepo))
 		reportBuilder.WriteString(fmt.Sprintf("· Github Action Workflow: `%s`\n", result.Provenance.Description.Provenance.Workflow))