@@ -102,7 +102,7 @@ jobs:
102102 tags : |
103103 type=raw,value=${{ github.ref_name }}
104104
105- - name : Build and push Docker image
105+ - name : Build and push Docker image (main)
106106 id : push-main
107107 uses : docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4
108108 with :
@@ -113,16 +113,8 @@ jobs:
113113 push : true
114114 tags : ${{ steps.meta-main.outputs.tags }}
115115 labels : ${{ steps.meta-main.outputs.labels }}
116- provenance : mode=max
117116 sbom : true
118117
119- - name : Generate artifact attestation
120- uses : actions/attest-build-provenance@v3
121- with :
122- subject-name : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME_MAIN}}
123- subject-digest : ${{ steps.push-main.outputs.digest }}
124- push-to-registry : true
125-
126118 # Build Nginx (depends on main)
127119 - name : Docker meta (nginx)
128120 id : meta-nginx
@@ -132,24 +124,17 @@ jobs:
132124 tags : |
133125 type=raw,value=${{ github.ref_name }}
134126
135- - name : Build and push Docker image
127+ - name : Build and push Docker image (nginx)
136128 id : push-nginx
137129 uses : docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4
138130 with :
139131 context : ./infrastructure/nginx/
140132 file : ./infrastructure/nginx/Dockerfile
141133 build-args : |
142134 APP_VERSION=${{ github.ref_name }}
135+ APP_IMAGE=${{ env.IMAGE_NAME_MAIN }}
143136 push : true
144137 pull : true
145138 tags : ${{ steps.meta-nginx.outputs.tags }}
146139 labels : ${{ steps.meta-nginx.outputs.labels }}
147- provenance : mode=max
148140 sbom : true
149-
150- - name : Generate artifact attestation
151- uses : actions/attest-build-provenance@v3
152- with :
153- subject-name : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME_NGINX}}
154- subject-digest : ${{ steps.push-nginx.outputs.digest }}
155- push-to-registry : true
0 commit comments