Browse Source
Switch to `attest` action
From the `attest-build-provenance` changelog:
> As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.
> Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead. Please see the actions/attest repository for usage information.
pull/7017/head
Daniel
2 weeks ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with
4 additions and
4 deletions
.github/workflows/release.yml
@ -235,7 +235,7 @@ jobs:
# Upload artifacts to Github Actions and Attest the binaries
- name : Attest binaries
uses : actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
uses : actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
with:
subject-path : vaultwarden-${{ env.NORMALIZED_ARCH }}
@ -361,7 +361,7 @@ jobs:
# Attest container images
- name : Attest - docker.io - ${{ matrix.base_image }}
if : ${{ vars.DOCKERHUB_REPO != '' && env.DIGEST_SHA != ''}}
uses : actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
uses : actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
with:
subject-name : ${{ vars.DOCKERHUB_REPO }}
subject-digest : ${{ env.DIGEST_SHA }}
@ -369,7 +369,7 @@ jobs:
- name : Attest - ghcr.io - ${{ matrix.base_image }}
if : ${{ vars.GHCR_REPO != '' && env.DIGEST_SHA != ''}}
uses : actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
uses : actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
with:
subject-name : ${{ vars.GHCR_REPO }}
subject-digest : ${{ env.DIGEST_SHA }}
@ -377,7 +377,7 @@ jobs:
- name : Attest - quay.io - ${{ matrix.base_image }}
if : ${{ vars.QUAY_REPO != '' && env.DIGEST_SHA != ''}}
uses : actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
uses : actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
with:
subject-name : ${{ vars.QUAY_REPO }}
subject-digest : ${{ env.DIGEST_SHA }}