announce container image attestations

This commit is contained in:
Kenneth Bingham 2025-02-24 16:04:27 -05:00
parent 64ec2b0a74
commit 66a88151ce
No known key found for this signature in database
GPG Key ID: 31709281860130B6
2 changed files with 4 additions and 2 deletions

View File

@ -94,8 +94,8 @@ jobs:
- name: Publish Attestations to GitHub - name: Publish Attestations to GitHub
uses: actions/attest-build-provenance@v1 uses: actions/attest-build-provenance@v1
env: env:
IMAGE_REPO_TAG: ${{ vars.ZROK_CONTAINER_IMAGE_REPO || 'openziti/zrok' }}:${{ steps.semver.outputs.zrok_semver }} IMAGE_REPO: ${{ vars.ZROK_CONTAINER_IMAGE_REPO || 'openziti/zrok' }}
with: with:
subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_REPO_TAG}} subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_REPO }}
subject-digest: ${{ steps.push.outputs.digest }} subject-digest: ${{ steps.push.outputs.digest }}
push-to-registry: true push-to-registry: true

View File

@ -12,6 +12,8 @@ CHANGE: Pre-releases are uploaded to the pre-release Linux package repo and Dock
CHANGE: Linux release binaries are now built on the ziti-builder container image based on Ubuntu Focal 20.04 to preserve backward compatibility as the ubuntu-20.04 GitHub runner is end of life. CHANGE: Linux release binaries are now built on the ziti-builder container image based on Ubuntu Focal 20.04 to preserve backward compatibility as the ubuntu-20.04 GitHub runner is end of life.
CHANGE: Container images now include SLSA and SBOM attestations, and these are also published to the Docker Hub registry (https://github.com/openziti/zrok/issues/890).
CHANGE: Release binary and text artifacts are now accompanied by provenance attestations (https://github.com/openziti/zrok/issues/889). CHANGE: Release binary and text artifacts are now accompanied by provenance attestations (https://github.com/openziti/zrok/issues/889).
## v0.4.48 ## v0.4.48