diff --git a/README.md b/README.md index 161acd9..b588997 100644 --- a/README.md +++ b/README.md @@ -345,7 +345,8 @@ The VSA can be signed and published to the registry using the signing functions "timeVerified": "2024-04-19T08:00:00.01Z", "resourceUri": "pkg:docker/example.org/example-image@1.0?platform=linux%2Famd64&digest=sha256%3A49f717386e5462e945232569a97a05831cb83bef8c3369be3bb7ea1793686960", "policy": { - "uri": "https://example.org/internal-policy/v1" + "uri": "https://example.org/internal-policy/v1", + "digest": {"sha256": "d71d6b8f49fcba1295b16f5394dd5863a14e4277eb663d66d8c48e392509afe0"} }, "verificationResult": "PASSED", "verifiedLevels": ["SLSA_BUILD_LEVEL_3"]