• 👋 Hi, I’m @Huan47
• 👀 I’m interested in ...
• 🌱 I’m currently learning ...
• 💞️ I’m looking to collaborate on ...
• 📫 How to reach me ...
• 😄 Pronouns: ...
• ⚡ Fun fact: ...

name: build-attested-image

on: push: branches: [main]

jobs: build: runs-on: ubuntu-latest permissions: id-token: write packages: write contents: read attestations: write env: REGISTRY: ghcr.io IMAGE_NAME: ${{ github.repository }}

steps:
  - name: Checkout
    uses: actions/checkout@v4
  - name: Login to GitHub Container Registry
    uses: docker/login-action@v3
    with:
      registry: ${{ env.REGISTRY }}
      username: ${{ github.actor }}
      password: ${{ secrets.GITHUB_TOKEN }}
  - name: Build and push image
    id: push
    uses: docker/build-push-action@v5.0.0
    with:
      context: .
      push: true
      tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
  - name: Attest
    uses: actions/attest-build-provenance@v1
    id: attest
    with:
      subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
      subject-digest: ${{ steps.push.outputs.digest }}
      push-to-registry: true