diff --git a/.github/workflows/reusable_docker_build_multiarch.yaml b/.github/workflows/reusable_docker_build_multiarch.yaml index 90efc77..dd6d14a 100644 --- a/.github/workflows/reusable_docker_build_multiarch.yaml +++ b/.github/workflows/reusable_docker_build_multiarch.yaml @@ -520,7 +520,7 @@ jobs: echo "digest=${DIGEST}" >> $GITHUB_OUTPUT - name: Generate artifact attestation AWS - uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 if: ${{ inputs.aws_push }} with: subject-name: "${{ inputs.aws_registry }}/${{ inputs.aws_image }}" @@ -556,7 +556,7 @@ jobs: run: *compose_multiarch - name: Generate artifact attestation GCP if: ${{ inputs.gcp_push }} - uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-name: "${{ inputs.gcp_registry }}/${{ inputs.gcp_image }}" subject-digest: ${{ steps.compose_image_gcp.outputs.digest }} @@ -581,7 +581,7 @@ jobs: run: *compose_multiarch - name: Generate artifact attestation GHCR if: ${{ inputs.ghcr_push }} - uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-name: "${{ inputs.ghcr_registry }}/${{ inputs.ghcr_image }}" subject-digest: ${{ steps.compose_image_ghcr.outputs.digest }} @@ -606,7 +606,7 @@ jobs: run: *compose_multiarch - name: Generate artifact attestation Dockerhub if: ${{ inputs.dockerhub_push }} - uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-name: "${{ inputs.dockerhub_registry }}/${{ inputs.dockerhub_image }}" subject-digest: ${{ steps.compose_image_dockerhub.outputs.digest }} diff --git a/actions/docker-build-push/action.yml b/actions/docker-build-push/action.yml index 1b34102..102f43d 100644 --- a/actions/docker-build-push/action.yml +++ b/actions/docker-build-push/action.yml @@ -121,7 +121,7 @@ runs: sbom: ${{ fromJson(inputs.sbom) }} labels: ${{ steps.meta.outputs.labels }} - name: Generate artifact attestation - uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 if: ${{ fromJson(inputs.push) || fromJson(inputs.push_attestation) }} with: subject-name: ${{ inputs.registry }}/${{ inputs.image}}