tested if actions/attest-build-provenance does require the tag to p…

…ush to the registry
TUM-Dev · May 16, 2024 · d6f21d2 · d6f21d2
1 parent 48b8ed0
commit d6f21d2
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/_docker-build.yml b/.github/workflows/_docker-build.yml
@@ -64,9 +64,10 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=min
       - name: Attest
+        if: github.ref == 'refs/heads/main'
         uses: actions/attest-build-provenance@v1
         id: attest
         with:
-          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:main
           subject-digest: ${{ steps.push.outputs.digest }}
           push-to-registry: true