rsp2k/headplane
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add provenance attestations

Browse Source
This commit is contained in:
Aarnav Tale 2025-06-22 17:28:19 -04:00
parent 144a8b87cd
commit 9a81b76398
No known key found for this signature in database
2 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.github/workflows/next.yaml vendored
View File

@ -46,6 +46,7 @@ jobs:
- name: Build and push Docker image - name: Build and push Docker image
uses: docker/build-push-action@v6 uses: docker/build-push-action@v6
id: push
with: with:
context: . context: .
file: ./Dockerfile file: ./Dockerfile
@ -55,3 +56,10 @@ jobs:
platforms: linux/amd64, linux/arm64 platforms: linux/amd64, linux/arm64
cache-from: type=gha cache-from: type=gha
cache-to: type=gha,mode=max cache-to: type=gha,mode=max
- name: Attest
uses: actions/attest-build-provenance@v2
id: attest
with:
subject-name: ghcr.io/${{ github.repository }}
subject-digest: ${{ steps.push.outputs.digest }}
push-to-registry: true

8
.github/workflows/release.yaml vendored
View File

@ -44,6 +44,7 @@ jobs:
- name: Build and push Docker image - name: Build and push Docker image
uses: docker/build-push-action@v6 uses: docker/build-push-action@v6
id: push
with: with:
context: . context: .
file: ./Dockerfile file: ./Dockerfile
@ -53,3 +54,10 @@ jobs:
platforms: linux/amd64, linux/arm64 platforms: linux/amd64, linux/arm64
cache-from: type=gha cache-from: type=gha
cache-to: type=gha,mode=max cache-to: type=gha,mode=max
- name: Attest
uses: actions/attest-build-provenance@v2
id: attest
with:
subject-name: ghcr.io/${{ github.repository }}
subject-digest: ${{ steps.push.outputs.digest }}
push-to-registry: true