diff --git a/.dockerignore b/.dockerignore
index c5c0fea..315e3ed 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -1,27 +1,32 @@
 # Common
-*.md
+
+_.md
 docker-compose.yml
-Dockerfile*
-.env*
+Dockerfile_
+.env\*
 Makefile
 
 # Logs
+
 logs
-*.log
+\*.log
 
 # IDE's
+
 .vscode/
 .idea/
 
 # Dependency directories
+
 node_modules/
 .venv/
 
 ## Cache directories
+
 .parcel-cache
 
 # git
+
 .git
 .gitattributes
 .gitignore
-.github/
diff --git a/.github/workflows/test-auto-labeler.yaml b/.github/workflows/test-auto-labeler.yaml
index e22eb6e..e62d656 100644
--- a/.github/workflows/test-auto-labeler.yaml
+++ b/.github/workflows/test-auto-labeler.yaml
@@ -9,6 +9,7 @@ permissions:
 jobs:
   auto_labeler:
     permissions:
+      contents: read
       pull-requests: write
     uses: ./.github/workflows/auto-labeler.yaml
     with:
diff --git a/Dockerfile b/Dockerfile
index 8ac9c8c..d0a534d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,2 +1,9 @@
 FROM alpine
-CMD ["echo", "Hello World!!"]
+
+WORKDIR /app
+
+# copy all files from repo to ensure all changes are included
+# which will ensure a new image digest is generated
+COPY . .
+
+CMD ["cat", "README.md"]
diff --git a/README.md b/README.md
index f5effea..9d5726f 100644
--- a/README.md
+++ b/README.md
@@ -23,5 +23,5 @@ This is a placeholder repo for multiple GitHub Actions we use in open source pro
 > - [labeler.yml](.github/labeler.yml)
 > - [release-drafter.yaml](.github/release-drafter.yaml)
 
-> [!WARNING]  
-> The container image generated in this repo is a placeholder, it contains no content. It uses [alpine:latest and says "Hello World"](https://github.com/github/ospo-reusable-workflows/blob/main/Dockerfile). The image creation option is for GitHub Actions who need it because their Action is not written in JavaScript/Typescript and they want to track downloads/usage.
+> [!NOTE]
+> The container image generated in this repo is a placeholder, it contains the files of this repository to ensure it shows "change" and a new container image digest is generated. This allows us to see tagging of the new container image is working and newly generated attestation is related to a new SHA/digest in the [packages view](https://github.com/github/ospo-reusable-workflows/pkgs/container/ospo-reusable-workflows).
diff --git a/docs/auto-labeler.md b/docs/auto-labeler.md
index 6c0a8d8..c1792b5 100644
--- a/docs/auto-labeler.md
+++ b/docs/auto-labeler.md
@@ -5,6 +5,7 @@
 ```yaml
 - uses: github/ospo-reusable-workflows/.github/workflows/auto-labeler.yml@main
   permissions:
+    contents: read
     pull-requests: write
   with:
     # The name of the configuration file to use, default is release-drafter.yml