From dd6c271091c2bee651cff7b35441337cc9f91461 Mon Sep 17 00:00:00 2001 From: "Justin (shocknet)" Date: Sun, 19 May 2024 17:07:07 -0400 Subject: [PATCH] attestations fix --- .github/workflows/push.yml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml index 3f0e2c60..3b508354 100644 --- a/.github/workflows/push.yml +++ b/.github/workflows/push.yml @@ -46,7 +46,9 @@ jobs: - name: Attest build provenance uses: actions/attest-build-provenance@v1 with: - artifact-digest: ${{ steps.build-and-push.outputs.digest }} - artifact-type: 'container-image' - artifact-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} - materials: '[{"uri":"git+https://github.com/${{ github.repository }}","digest":{"sha1":"${{ github.sha }}"},"mediaType":"application/vnd.github.v3+json"}]' + subject-path: ${{ github.workspace }} + subject-digest: ${{ steps.build-and-push.outputs.digest }} + subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} + push-to-registry: true + github-token: ${{ secrets.GITHUB_TOKEN }} +