We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent f034180 commit 4b798dcCopy full SHA for 4b798dc
.github/workflows/docker-image.yml
@@ -23,8 +23,15 @@ jobs:
23
username: ${{ github.actor }}
24
password: ${{ secrets.GITHUB_TOKEN }}
25
- name: Push the Docker image to GitHub Packages
26
- uses: docker/push-action@v2
+ uses: docker/build-push-action@v2
27
with:
28
context: .
29
push: true
30
tags: ${{ github.repository }}:latest, ${{ github.repository }}:finance-${{ github.sha }}
31
+
32
+ - name: Generate artifact attestation
33
+ uses: actions/attest-build-provenance@v2
34
+ with:
35
+ subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
36
+ subject-digest: ${{ steps.push.outputs.digest }}
37
+ push-to-registry: true
0 commit comments