add push-to-registry flag for provenance

Signed-off-by: Brian DeHamer <[email protected]>
ejahnGithub · Jan 31, 2024 · d128556 · d128556
1 parent 93bf3f1
commit d128556
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/publish_container.yaml b/.github/workflows/publish_container.yaml
@@ -71,6 +71,7 @@ jobs:
           sbom: sbom-image-latest.json
           subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           subject-digest: ${{ steps.build-push-latest.outputs.digest }}
+          push-to-registry: true
       - name: update release
         id: update_release
         uses: tubone24/[email protected]
@@ -85,4 +86,4 @@ jobs:
             Verify the contents of the image:
             ```
             gh attestation verify oci://${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ steps.build-push-latest.outputs.digest }} --owner ${{ github.actor }}
-            ```
+            ```