Skip to content

Conversation

johnsimons
Copy link
Member

@johnsimons johnsimons commented Feb 24, 2025

Using native action to login to ghcr.io.
Replaced multiple tagging commands with a single one Using build-push-action instead of script.
This adds the provenance by default, see https://docs.docker.com/build/ci/github-actions/attestations/#default-provenance .

This gives the image a better score in DockerHub Scout health score.
image

This is the same changes as Particular/ServiceControl.Connector.MassTransit#182.

Using native action to login to ghcr.io
Replaced multiple tagging commands with a single one
Using build-push-action instead of script
This adds the provenance by default, see https://docs.docker.com/build/ci/github-actions/attestations/#default-provenance
This given the image a better score in DockerHub scout health score
@johnsimons
Copy link
Member Author

This is what looks like in the connector
image

@johnsimons johnsimons added the Type: Improvement Type: Improvement label Feb 25, 2025
@johnsimons johnsimons enabled auto-merge February 25, 2025 23:31
@johnsimons johnsimons merged commit 0d51bca into master Feb 25, 2025
5 checks passed
@johnsimons johnsimons deleted the john/provenance branch February 25, 2025 23:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Improvement Type: Improvement
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants