Skip to content

Commit 07eff62

Browse files
fix: add subject-name to attest-build-provenance step (#51)
The actions/attest-build-provenance action requires subject-name when subject-digest is provided. Added the OCI ref (ghcr.io/jorisjonkers-dev/ <artifact-name>:deploy-<version>) as the subject name, matching the tag scheme used in publish.sh. Co-authored-by: JorisJonkers Agent <agents@jorisjonkers.dev>
1 parent 89f4995 commit 07eff62

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

.github/workflows/deploy-artifact.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -133,6 +133,7 @@ jobs:
133133
if: ${{ steps.publish.outputs.artifact-digest != '' }}
134134
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
135135
with:
136+
subject-name: ghcr.io/jorisjonkers-dev/${{ inputs.artifact-name }}:deploy-${{ inputs.artifact-version }}
136137
subject-digest: ${{ steps.publish.outputs.artifact-digest }}
137138
push-to-registry: true
138139

0 commit comments

Comments
 (0)