diff --git a/.github/workflows/vib-build.yml b/.github/workflows/vib-build.yml index 643574f..2835a98 100644 --- a/.github/workflows/vib-build.yml +++ b/.github/workflows/vib-build.yml @@ -95,7 +95,9 @@ jobs: if: ${{ needs.check_update.outputs.has_updates == 'true' }} permissions: - packages: write # Allow pushing images to GHCR. + packages: write # Allow pushing images to GHCR + attestations: write # To create and write attestations + id-token: write # Additional permissions for persistence of the attestations steps: - uses: actions/checkout@v4 @@ -158,3 +160,12 @@ jobs: cache-to: type=gha,mode=max platforms: linux/amd64 provenance: false + + - name: Attest pushed image + uses: actions/attest-build-provenance@v1 + id: attest + if: ${{ github.event_name != 'pull_request' }} + with: + subject-name: ${{ env.IMAGE_URL }} + subject-digest: ${{ steps.push.outputs.digest }} + push-to-registry: false diff --git a/README.md b/README.md index d5decaf..552e707 100644 --- a/README.md +++ b/README.md @@ -24,9 +24,9 @@ This template repository is a starting point for creating custom [Vib images](ht If your image is successfully built, you can then point ABRoot to your custom image to use it. -- Edit `/etc/abroot/abroot.json` with `host-shell pkexec nano /etc/abroot/abroot.json`. -- Change the "name" entry from something like `vanilla-os/desktop` to `your-github-name/your-image-name` (for example `taukakao/custom`). -- Run `abroot upgrade` to switch to your custom image. +- Edit the `/etc/abroot/abroot.json` file with the command: `host-shell pkexec nano /etc/abroot/abroot.json`. +- Change the "name" entry from something like `vanilla-os/desktop` to `your-github-name/your-image-name` (for example `taukakao/custom`). [**Note**: All characters must be in lowercase.] +- Now, Run `abroot upgrade` to switch to your custom image. ## Explore