Docker Digest File for Artifact Attestations
Docker Digest File for Artifact Attestations: a task in LegoFlow-SWE (Harbor dataset). Using GitHub’s actions/attest-build-provenance with container images requires a list of image references in the form registry/image:tag@sha256:digest . GoReleaser currently publishes Docker images (both single…
The task
Using GitHub’s `actions/attest-build-provenance` with container images requires a list of image references in the form `registry/image:tag@sha256:digest`. GoReleaser currently publishes Docker images (both single images and manifests) but does not produce a dedicated digest file for this use case. Users are forced to…
Part of Lego-X/LegoFlow-SWE.