Update attestation script to include LICENSE and README.md attachments, and refine README scenario description

Author: sofusalbertsen

multi-repo-attestation/1.sh

@@ -25,7 +25,7 @@ tree -L 4
 cd devbox-demo
 echo "Current directory: $(pwd)"
 echo "Attesting devbox-demo repository"
-kosli attest generic --name app.sbom --trail ${GIT_COMMIT} --attachments  LICENSE
-kosli attest generic --name app.sbom --trail ${GIT_COMMIT} --commit ${GIT_COMMIT} --attachments  README.md
+kosli attest generic --name app.sbom --trail ${GIT_COMMIT} --commit ${GIT_COMMIT} --repo-root . --attachments  LICENSE
+kosli attest generic --name app.sbom --trail ${GIT_COMMIT} --attachments  README.md
 
 kosli get trail -o json ${GIT_COMMIT} > data.json

multi-repo-attestation/README.md

@@ -8,8 +8,8 @@ Create a scenario where you clone down a 2nd repo, and performs an attestation i
 * Attest one artifact
 * Clone down another repo: https://github.com/sofusalbertsen/devbox-demo
 * Attest files from the second repo with two different styles:
-  * attest to the trail
   * Attest to the trail AND the HEAD commit from parent repo.
+  * attest to the trail, with no other additions.
 
 Repo looks like this: