Add attestations (#597)

https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds https://docs.docker.com/build/ci/github-actions/attestations/
DawnbrandBots · May 31, 2024 · 9f043ce · 9f043ce
1 parent cc472c6
commit 9f043ce
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -50,6 +50,7 @@ jobs:
  username: ${{ github.repository_owner }}
  password: ${{ secrets.GITHUB_TOKEN }}
  - uses: docker/build-push-action@v5
+ id: build-push
  with:
  push: ${{ github.event_name == 'push' }}
  tags: ${{ steps.meta.outputs.tags }}
@@ -58,3 +59,10 @@ jobs:
  pull: true
  cache-from: type=local,src=/tmp/.buildx-cache
  cache-to: type=local,dest=/tmp/.buildx-cache,mode=max
+ sbom: ${{ github.event_name == 'push' }}
+ - uses: actions/attest-build-provenance@v1
+ if: ${{ github.event_name == 'push' }}
+ with:
+ subject-name: ${{ steps.meta.outputs.tags[0] }}
+ subject-digest: ${{ steps.build-push.outputs.digest }}
+ push-to-registry: true