Attest atrifacts

.github/workflows/build-latest.yml

@@ -21,8 +21,16 @@ jobs:
         password: ${{secrets.GITHUB_TOKEN}}
 
     - name: Build and Push Docker image
+      id: push
       uses: docker/[email protected]
       with:
         context: .
         push: true
-        tags: ghcr.io/salopensource/sal:latest
+        tags: ghcr.io/salopensource/sal:latest
+
+    - name: Generate artifact attestation
+      uses: actions/attest-build-provenance@v1
+      with:
+        subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
+        subject-digest: ${{ steps.push.outputs.digest }}
+        push-to-registry: true

.github/workflows/build-saml-latest.yml

@@ -27,9 +27,17 @@ jobs:
         password: ${{secrets.GITHUB_TOKEN}}
 
     - name: Build and Push Docker image
+      id: push
       uses: docker/[email protected]
       with:
         context: saml
         file: saml/Dockerfile.pristine
         push: true
-        tags: ghcr.io/salopensource/sal-saml:latest
+        tags: ghcr.io/salopensource/sal-saml:latest
+
+    - name: Generate artifact attestation
+      uses: actions/attest-build-provenance@v1
+      with:
+        subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
+        subject-digest: ${{ steps.push.outputs.digest }}
+        push-to-registry: true

.github/workflows/build-saml-tag.yml

@@ -27,9 +27,17 @@ jobs:
         password: ${{secrets.GITHUB_TOKEN}}
 
     - name: Build and Push Docker image
+      id: push
       uses: docker/[email protected]
       with:
         context: saml
         push: true
         file: saml/Dockerfile.pristine
-        tags: ghcr.io/salopensource/sal-saml:${{  github.ref_name }}
+        tags: ghcr.io/salopensource/sal-saml:${{  github.ref_name }}
+
+    - name: Generate artifact attestation
+      uses: actions/attest-build-provenance@v1
+      with:
+        subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
+        subject-digest: ${{ steps.push.outputs.digest }}
+        push-to-registry: true

.github/workflows/build-tag.yml

@@ -21,8 +21,16 @@ jobs:
         password: ${{secrets.GITHUB_TOKEN}}
 
     - name: Build and Push Docker image
+      id: push
       uses: docker/[email protected]
       with:
         context: .
         push: true
-        tags: ghcr.io/salopensource/sal:${{  github.ref_name }}
+        tags: ghcr.io/salopensource/sal:${{  github.ref_name }}
+
+    - name: Generate artifact attestation
+      uses: actions/attest-build-provenance@v1
+      with:
+        subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
+        subject-digest: ${{ steps.push.outputs.digest }}
+        push-to-registry: true

sal/version.plist

@@ -3,6 +3,6 @@
 <plist version="1.0">
 <dict>
 	<key>version</key>
-	<string>4.3.0.2293</string>
+	<string>4.3.0.2294</string>
 </dict>
 </plist>