Commit 788a9bc

authored

docs: bump actions/attest-build-provenance from 2 to 3 (#40066)

1 parent f223058 commit 788a9bcCopy full SHA for 788a9bc

File tree

-5

lines changed

content/actions
- how-tos/secure-your-work/use-artifact-attestations
  - use-artifact-attestations.md
- tutorials/publish-packages
  - publish-docker-images.md
data/reusables/package_registry
- publish-docker-image.md

-5

lines changed

Lines changed: 2 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -42,7 +42,7 @@ When you run your updated workflows, they will build your artifacts and generate`
`42`	`42`
`43`	`43`	```yaml
`44`	`44`	`- name: Generate artifact attestation`
`45`		`- uses: actions/attest-build-provenance@v2`
	`45`	`+ uses: actions/attest-build-provenance@v3`
`46`	`46`	`with:`
`47`	`47`	`subject-path: 'PATH/TO/ARTIFACT'`
`48`	`48`	```
`@@ -65,7 +65,7 @@ When you run your updated workflows, they will build your artifacts and generate`
`65`	`65`
`66`	`66`	```yaml
`67`	`67`	`- name: Generate artifact attestation`
`68`		`- uses: actions/attest-build-provenance@v2`
	`68`	`+ uses: actions/attest-build-provenance@v3`
`69`	`69`	`with:`
`70`	`70`	`subject-name: {% raw %}${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}{% endraw %}`
`71`	`71`	`subject-digest: 'sha256:fedcba0...'`

Lines changed: 2 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -117,7 +117,7 @@ jobs:`
`117`	`117`
`118`	`118`	`{% ifversion artifact-attestations %}`
`119`	`119`	`- name: Generate artifact attestation`
`120`		`- uses: actions/attest-build-provenance@v2`
	`120`	`+ uses: actions/attest-build-provenance@v3`
`121`	`121`	`with:`
`122`	`122`	`subject-name: index.docker.io/my-docker-hub-namespace/my-docker-hub-repository`
`123`	`123`	`subject-digest: {% raw %}${{ steps.push.outputs.digest }}{% endraw %}`
`@@ -229,7 +229,7 @@ jobs:`
`229`	`229`
`230`	`230`	`{% ifversion artifact-attestations %}`
`231`	`231`	`- name: Generate artifact attestation`
`232`		`- uses: actions/attest-build-provenance@v2`
	`232`	`+ uses: actions/attest-build-provenance@v3`
`233`	`233`	`with:`
`234`	`234`	`subject-name: {% data reusables.package_registry.container-registry-hostname %}/{% raw %}${{ github.repository }}{% endraw %}`
`235`	`235`	`subject-digest: {% raw %}${{ steps.push.outputs.digest }}{% endraw %}`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -57,7 +57,7 @@ jobs:`
`57`	`57`	`{% ifversion artifact-attestations %}`
`58`	`58`	`# This step generates an artifact attestation for the image, which is an unforgeable statement about where and how it was built. It increases supply chain security for people who consume the image. For more information, see [Using artifact attestations to establish provenance for builds](/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds).`
`59`	`59`	`- name: Generate artifact attestation`
`60`		`- uses: actions/attest-build-provenance@v2`
	`60`	`+ uses: actions/attest-build-provenance@v3`
`61`	`61`	`with:`
`62`	`62`	`subject-name: {% raw %}${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}{% endraw %}`
`63`	`63`	`subject-digest: {% raw %}${{ steps.push.outputs.digest }}{% endraw %}`

Comments

(0)