feat: add provenance attestations

This commit is contained in:
Aarnav Tale
2025-06-22 17:28:19 -04:00
parent 144a8b87cd
commit 9a81b76398
2 changed files with 16 additions and 0 deletions
+8
View File
@@ -46,6 +46,7 @@ jobs:
- name: Build and push Docker image
uses: docker/build-push-action@v6
id: push
with:
context: .
file: ./Dockerfile
@@ -55,3 +56,10 @@ jobs:
platforms: linux/amd64, linux/arm64
cache-from: type=gha
cache-to: type=gha,mode=max
- name: Attest
uses: actions/attest-build-provenance@v2
id: attest
with:
subject-name: ghcr.io/${{ github.repository }}
subject-digest: ${{ steps.push.outputs.digest }}
push-to-registry: true
+8
View File
@@ -44,6 +44,7 @@ jobs:
- name: Build and push Docker image
uses: docker/build-push-action@v6
id: push
with:
context: .
file: ./Dockerfile
@@ -53,3 +54,10 @@ jobs:
platforms: linux/amd64, linux/arm64
cache-from: type=gha
cache-to: type=gha,mode=max
- name: Attest
uses: actions/attest-build-provenance@v2
id: attest
with:
subject-name: ghcr.io/${{ github.repository }}
subject-digest: ${{ steps.push.outputs.digest }}
push-to-registry: true