Open
Description
Context
Add https://github.com/actions/attest-build-provenance to all docker build workflows. This would let users validate where containers are built and that they are legitimate.
See https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds for more details.
Alternatives
N/A
Has the feature been requested before?
No
If the feature request is accepted, would you be willing to submit a PR?
Yes
Metadata
Metadata
Assignees
Labels
No labels