Skip to content

Commit

Permalink
Generate provenance for container images
Browse files Browse the repository at this point in the history
Signed-off-by: Stefan Prodan <[email protected]>
  • Loading branch information
stefanprodan committed Jun 21, 2023
1 parent 06cc6c8 commit 8a822e1
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -132,7 +132,7 @@ jobs:
actions: read # To read the workflow path.
id-token: write # To sign the provenance.
contents: write # To add assets to the release.
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3[email protected]
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3[email protected]
with:
image: ${{ needs.release.outputs.image_url }}
digest: ${{ needs.release.outputs.image_digest }}
Expand All @@ -146,7 +146,7 @@ jobs:
actions: read # To read the workflow path.
id-token: write # To sign the provenance.
contents: write # To add assets to the release.
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3[email protected]
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3[email protected]
with:
image: ghcr.io/${{ needs.release.outputs.image_url }}
digest: ${{ needs.release.outputs.image_digest }}
Expand Down

0 comments on commit 8a822e1

Please sign in to comment.