test new action

Author: ejahnGithub

.github/workflows/publish_container.yaml

@@ -43,21 +43,6 @@ jobs:
           tags: |
             type=ref,event=branch
             type=sha,format=long
-      - name: update release
-        id: update_release
-        uses: tubone24/[email protected]
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        with:
-          body: |
-            Docker Image Tag: ${{ steps.meta.outputs.tags }}
-            ```
-            docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.tags }}
-            ```
-            Verify the contents of the image:
-            ```
-            gh attestation verify oci://${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.tags }} --owner ${{ github.actor }}
-            ```
       # This step uses the `docker/build-push-action` action to build the image, based on your repository's `Dockerfile`. If the build succeeds, it pushes the image to GitHub Packages.
       # It uses the `context` parameter to define the build's context as the set of files located in the specified path. For more information, see "[Usage](https://github.com/docker/build-push-action#usage)" in the README of the `docker/build-push-action` repository.
       # It uses the `tags` and `labels` parameters to tag and label the image with the output from the "meta" step.
@@ -85,4 +70,19 @@ jobs:
         with:
           sbom: sbom-image-latest.json
           subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-          subject-digest: ${{ steps.build-push-latest.outputs.digest }}
+          subject-digest: ${{ steps.build-push-latest.outputs.digest }}
+      - name: update release
+        id: update_release
+        uses: tubone24/[email protected]
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        with:
+          body: |
+            Docker Image Tag: ${{ steps.build-push-latest.outputs.digest }}
+            ```
+            docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build-push-latest.outputs.digest }}
+            ```
+            Verify the contents of the image:
+            ```
+            gh attestation verify oci://${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build-push-latest.outputs.digest }} --owner ${{ github.actor }}
+            ```