attest

Author: dflook

.github/workflows/base-image.yaml

@@ -33,6 +33,7 @@ jobs:
         uses: docker/setup-buildx-action@v2
 
       - name: Base image
+        id: build-and-push
         run: |
           docker buildx build \
             --tag danielflook/terraform-github-actions-base:$GITHUB_RUN_ID \
@@ -54,3 +55,9 @@ jobs:
             image
 
           echo "digest=$(<manifest-list-digest.txt)" >> "$GITHUB_OUTPUT"
+
+      - name: Generate image attestation
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-name: index.docker.io/danielflook/terraform-github-actions-base
+          subject-digest: ${{ steps.build-and-push.outputs.digest }}