TheArchive/restic
1
0
Fork 0
mirror of https://github.com/restic/restic.git synced 2025-07-30 00:33:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
restic/changelog/unreleased/issue-4983

8 lines
349 B
Plaintext
Raw Normal View History

changelog: update to indicate change applies only for GHCR images.
2024-12-02 01:11:26 +05:30
Enhancement: add SLSA provenance to the GHCR Container images
docker: add SLSA provenance to .github workflow * the id-token of the GitHub Actions workflow will be used for image signing * replace branch-based tagging with SHA-based tagging since, branch names are mutable, SLSA provenance requires immutable tagging * use official SLSA framework Github Reusable workflow docker: fix incorrect registry name in image output step * use REGISTRY environment variable instead of IMAGE_REGISTRY docker: revert change to remove branch tag
2024-09-15 22:44:00 +05:30
changelog: update to indicate change applies only for GHCR images.
2024-12-02 01:11:26 +05:30
Restic's GitHub Container Registry (GHCR) image build workflow now includes
SLSA provenance generation. This enhancement improves the security and
traceability of images built and pushed to GHCR.
docker: add SLSA provenance to .github workflow * the id-token of the GitHub Actions workflow will be used for image signing * replace branch-based tagging with SHA-based tagging since, branch names are mutable, SLSA provenance requires immutable tagging * use official SLSA framework Github Reusable workflow docker: fix incorrect registry name in image output step * use REGISTRY environment variable instead of IMAGE_REGISTRY docker: revert change to remove branch tag
2024-09-15 22:44:00 +05:30
https://github.com/restic/restic/issues/4983
https://github.com/restic/restic/pull/4999
Reference in New Issue Copy Permalink