fix: Add provenance

This commit is contained in:
2025-08-02 21:30:14 +02:00
parent b391c381ba
commit 836d204dd3
+7
View File
@@ -68,6 +68,7 @@ jobs:
tags: | tags: |
type=raw,value=${{ matrix.env }} type=raw,value=${{ matrix.env }}
- name: Build & push Nginx image to GHCR - name: Build & push Nginx image to GHCR
id: push
if: steps.check.outputs.should_deploy == 'true' if: steps.check.outputs.should_deploy == 'true'
uses: docker/build-push-action@v6 uses: docker/build-push-action@v6
with: with:
@@ -75,6 +76,12 @@ jobs:
push: true push: true
tags: ${{ steps.meta.outputs.tags }} tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }} labels: ${{ steps.meta.outputs.labels }}
- name: Attest
uses: actions/attest-build-provenance@v2
id: attest
with:
subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
subject-digest: ${{ steps.push.outputs.digest }}
- name: Copy files to remote - name: Copy files to remote
if: steps.check.outputs.should_deploy == 'true' if: steps.check.outputs.should_deploy == 'true'
uses: burnett01/rsync-deployments@7.0.2 uses: burnett01/rsync-deployments@7.0.2