Merge pull request #1016 from Icinga/dependabot/github_actions/actions/attest-build-provenance-3

build(deps): bump actions/attest-build-provenance from 2 to 3
This commit is contained in:
Alvar 2025-09-01 06:51:49 +00:00 committed by GitHub
commit a25e2c2d9c
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -149,7 +149,7 @@ jobs:
- name: Generate artifact attestation for GitHub Container Registry
if: github.event_name != 'pull_request'
uses: actions/attest-build-provenance@v2
uses: actions/attest-build-provenance@v3
with:
subject-name: ghcr.io/${{ env.IMAGE_NAME }}
subject-digest: ${{ steps.build-and-push.outputs.digest }}
@ -157,7 +157,7 @@ jobs:
- name: Generate artifact attestation for Docker Hub
if: github.event_name != 'pull_request'
uses: actions/attest-build-provenance@v2
uses: actions/attest-build-provenance@v3
with:
# According to the documentation [^1],
# "index.docker.io" should be used as the registry portion of the image name when pushing to Docker Hub.