From 836d204dd3cd0910a9fdff2aac753c1c73f1585c Mon Sep 17 00:00:00 2001 From: Jim Martens Date: Sat, 2 Aug 2025 21:30:14 +0200 Subject: [PATCH] fix: Add provenance --- .github/workflows/deploy.yaml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml index 07a0b80..91d7aba 100644 --- a/.github/workflows/deploy.yaml +++ b/.github/workflows/deploy.yaml @@ -68,6 +68,7 @@ jobs: tags: | type=raw,value=${{ matrix.env }} - name: Build & push Nginx image to GHCR + id: push if: steps.check.outputs.should_deploy == 'true' uses: docker/build-push-action@v6 with: @@ -75,6 +76,12 @@ jobs: push: true tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} + - name: Attest + uses: actions/attest-build-provenance@v2 + id: attest + with: + subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} + subject-digest: ${{ steps.push.outputs.digest }} - name: Copy files to remote if: steps.check.outputs.should_deploy == 'true' uses: burnett01/rsync-deployments@7.0.2