Attestation for docker image

govlt · Jul 17, 2024 · 83a1570 · 83a1570
1 parent 475a1dd
commit 83a1570
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -18,6 +18,8 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write
+      attestations: write
     outputs:
       digest: ${{ steps.docker.outputs.digest }}
     steps:
@@ -33,4 +35,11 @@ jobs:
           no-cache: true
           push: true
           cache-from: ''
-          cache-to: ''
+          cache-to: ''
+
+      - name: Generate docker image attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-name: ghcr.io/govlt/national-boundaries-api
+          subject-digest: ${{ steps.docker.outputs.digest }}
+          push-to-registry: true