diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a7f0096de7..c5f39f2751 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -206,40 +206,15 @@ jobs: *.platform=${{ env.BAKE_PLATFORMS }} # Attest Debian - - name: Attest - docker.io - Debian - if: ${{ env.HAVE_DOCKERHUB_LOGIN == 'true' && matrix.base_image == 'debian' && steps.bake_vw.outputs.metadata != ''}} - uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0 - with: - subject-name: ${{ vars.DOCKERHUB_REPO }} - subject-digest: ${{ fromJSON(steps.bake_vw.outputs.metadata).debian-multi['containerimage.digest'] }} - push-to-registry: true - - - name: Attest - ghcr.io - Debian - if: ${{ env.HAVE_GHCR_LOGIN == 'true' && matrix.base_image == 'debian' && steps.bake_vw.outputs.metadata != ''}} - uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0 - with: - subject-name: ${{ vars.GHCR_REPO }} - subject-digest: ${{ fromJSON(steps.bake_vw.outputs.metadata).debian-multi['containerimage.digest'] }} - push-to-registry: true - - - name: Attest - quay.io - Debian - if: ${{ env.HAVE_QUAY_LOGIN == 'true' && matrix.base_image == 'debian' && steps.bake_vw.outputs.metadata != ''}} - uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0 - with: - subject-name: ${{ vars.QUAY_REPO }} - subject-digest: ${{ fromJSON(steps.bake_vw.outputs.metadata).debian-multi['containerimage.digest'] }} - push-to-registry: true - - # Attest Alpine - - name: Attest - docker.io - Alpine + - name: Attest - docker.io if: ${{ env.HAVE_DOCKERHUB_LOGIN == 'true' && matrix.base_image == 'alpine' && steps.bake_vw.outputs.metadata != ''}} uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0 with: subject-name: ${{ vars.DOCKERHUB_REPO }} - subject-digest: ${{ fromJSON(steps.bake_vw.outputs.metadata).alpine-multi['containerimage.digest'] }} + subject-digest: ${{ fromJSON(steps.bake_vw.outputs.metadata)['alpine-multi']['containerimage.digest'] }} push-to-registry: true - - name: Attest - ghcr.io - Alpine + - name: Attest - ghcr.io if: ${{ env.HAVE_GHCR_LOGIN == 'true' && matrix.base_image == 'alpine' && steps.bake_vw.outputs.metadata != ''}} uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0 with: @@ -247,7 +222,7 @@ jobs: subject-digest: ${{ fromJSON(steps.bake_vw.outputs.metadata).alpine-multi['containerimage.digest'] }} push-to-registry: true - - name: Attest - quay.io - Alpine + - name: Attest - quay.io if: ${{ env.HAVE_QUAY_LOGIN == 'true' && matrix.base_image == 'alpine' && steps.bake_vw.outputs.metadata != ''}} uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0 with: