1
0
mirror of https://github.com/pocket-id/pocket-id.git synced 2026-02-04 15:04:43 +00:00

ci/cd: fix subject digest in container image attestation

This commit is contained in:
Elias Schneider
2025-05-25 00:06:21 +02:00
parent 7691622274
commit 31ae8cac96

View File

@@ -6,7 +6,6 @@ on:
- "v*.*.*" - "v*.*.*"
jobs: jobs:
build: build:
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions: permissions:
@@ -25,7 +24,7 @@ jobs:
cache-dependency-path: frontend/package-lock.json cache-dependency-path: frontend/package-lock.json
- uses: actions/setup-go@v5 - uses: actions/setup-go@v5
with: with:
go-version-file: 'backend/go.mod' go-version-file: "backend/go.mod"
- name: Set up QEMU - name: Set up QEMU
uses: docker/setup-qemu-action@v3 uses: docker/setup-qemu-action@v3
- name: Set up Docker Buildx - name: Set up Docker Buildx
@@ -78,13 +77,13 @@ jobs:
- name: Binary attestation - name: Binary attestation
uses: actions/attest-build-provenance@v2 uses: actions/attest-build-provenance@v2
with: with:
subject-path: 'backend/.bin/pocket-id-**' subject-path: "backend/.bin/pocket-id-**"
- name: Container image attestation - name: Container image attestation
uses: actions/attest-build-provenance@v2 uses: actions/attest-build-provenance@v2
with: with:
subject-name: '${{ env.DOCKER_IMAGE_NAME }}' subject-name: "${{ env.DOCKER_IMAGE_NAME }}"
subject-digest: ${{ steps.container-build-push.digest }} subject-digest: ${{ steps.container-build-push.outputs.digest }}
push-to-registry: true push-to-registry: true
- name: Upload binaries to release - name: Upload binaries to release