Skip to content

Commit

Permalink
fix: generate attenuation
Browse files Browse the repository at this point in the history
  • Loading branch information
dgpalmieri committed Jun 19, 2024
1 parent 33b173e commit 999d782
Showing 1 changed file with 6 additions and 7 deletions.
13 changes: 6 additions & 7 deletions .github/workflows/publish_image.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -51,10 +51,9 @@ jobs:
labels: ${{ steps.meta.outputs.labels }}

# This step generates an artifact attestation for the image, which is an unforgeable statement about where and how it was built. It increases supply chain security for people who consume the image. For more information, see "[AUTOTITLE](/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds)."
# THIS IS ONLY AVAILABLE IN PUBLIC REPOS
#- name: Generate artifact attestation
#uses: actions/attest-build-provenance@v1
#with:
#subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
#subject-digest: ${{ steps.push.outputs.digest }}
#push-to-registry: true
- name: Generate artifact attestation
uses: actions/attest-build-provenance@v1
with:
subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
subject-digest: ${{ steps.push.outputs.digest }}
push-to-registry: true

0 comments on commit 999d782

Please sign in to comment.