Attest approval on artifact (#30)

Author: ToreMerkely

.github/workflows/build-deploy-backend.yml

@@ -209,7 +209,7 @@ jobs:
     secrets: inherit
 
   get-approver-for-production:
-    needs: [setup, deploy-production]
+    needs: [setup, build, deploy-production]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -233,6 +233,7 @@ jobs:
             --name release-approval \
             --flow ${{ env.KOSLI_FLOW }} \
             --trail ${{ needs.setup.outputs.kosli-trail }} \
+            --fingerprint ${{ needs.build.outputs.fingerprint }} \
             --attestation-data ${{ steps.get-approver.outputs.approval-json-file }} \
             --annotate Approver="${{ steps.get-approver.outputs.approver }}"
 

apps/backend/backend-content.txt

@@ -1,4 +1,4 @@
 This is just a file to test out that changes to back-end source code
 can trigger a build, reporting to Kosli
 
-counter=10
+counter=11