Fix attest build provenance steps in publishing docker image examples #36263
+9
−3
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Instead of using env.REGISTRY and env.IMAGE_NAME, which are not set, use the images in the metadata-action step.
Fixes #36243
Why:
Closes: #36243
What's being changed (if available, include any code snippets, screenshots, or gifs):
The image publishing example workflows use
env.REGISTRY
andenv.IMAGE_NAME
which I found confusing because they are not set. I changed them to use the image names that are already used elsewhere in the same workflows.In the example that pushes an image to both Docker Hub and GitHub I added an attestation step for Docker Hub to show how to create attestations in multiple registries.
Check off the following: