feat: add docker attestation

This commit is contained in:
Sean Molenaar 2024-07-23 08:59:03 -04:00 committed by GitHub
parent d6bcdffe97
commit cd7660814d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -52,6 +52,18 @@ jobs:
- name: Run brew test-bot --only-setup - name: Run brew test-bot --only-setup
run: docker run --rm brew brew test-bot --only-setup run: docker run --rm brew brew test-bot --only-setup
- name: Generate image digest
id: digest
run: echo "digest=$(docker inspect --format='{{index .RepoDigests 0}}' brew)" >> "$GITHUB_OUTPUT"
- name: Generate build provenance
uses: actions/attest-build-provenance@v1.3.3
id: attest
with:
subject-name: ghcr.io/homebrew/ubuntu${{matrix.version}}
subject-digest: ${{ steps.digest.outputs.digest }}
push-to-registry: ${{ startsWith(github.ref, 'refs/tags/') }}
- name: Deploy the tagged Docker image to GitHub Packages - name: Deploy the tagged Docker image to GitHub Packages
if: startsWith(github.ref, 'refs/tags/') if: startsWith(github.ref, 'refs/tags/')
run: | run: |