add push-to-registry flag for provenance

Signed-off-by: Brian DeHamer <[email protected]>

Author: bdehamer

.github/workflows/publish_container.yaml

@@ -71,6 +71,7 @@ jobs:
           sbom: sbom-image-latest.json
           subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           subject-digest: ${{ steps.build-push-latest.outputs.digest }}
+          push-to-registry: true
       - name: update release
         id: update_release
         uses: tubone24/[email protected]
@@ -85,4 +86,4 @@ jobs:
             Verify the contents of the image:
             ```
             gh attestation verify oci://${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build-push-latest.outputs.digest }} --owner ${{ github.actor }}
-            ```
+            ```