Merge pull request #916 from Icinga/dont-push-attestations-to-image-registries

`container-image` workflow: Don't push attestations to image registries
This commit is contained in:
Eric Lippmann 2025-04-01 11:26:29 +02:00 committed by GitHub
commit dea6b57fa9
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -103,7 +103,7 @@ jobs:
with:
subject-name: ghcr.io/${{ env.IMAGE_NAME }}
subject-digest: ${{ steps.build-and-push.outputs.digest }}
push-to-registry: true
push-to-registry: false
- name: Generate artifact attestation for Docker Hub
if: github.event_name != 'pull_request'
@ -115,4 +115,4 @@ jobs:
# [^1]: https://github.com/actions/attest-build-provenance?tab=readme-ov-file#container-image
subject-name: index.docker.io/${{ env.IMAGE_NAME }}
subject-digest: ${{ steps.build-and-push.outputs.digest }}
push-to-registry: true
push-to-registry: false