das

Author: douyun-dtyq

.github/workflows/build.yml

@@ -193,16 +193,11 @@ jobs:
         id: attest-stripped-ghcr
         with:
           subject-name: ${{ inputs.ghcrImageName || format('ghcr.io/{0}', github.repository) }}
-          subject-digest: ${{ steps.build.outputs.stripped_digest }}
+          subject-digest: |
+            ${{ steps.build.outputs.stripped_digest }}
+            ${{ steps.build.outputs.debuggable_digest }}
           push-to-registry: true
 
-      - name: Generate provenance attestation for debuggable image at ghcr.io
-        uses: actions/attest-build-provenance@v2
-        id: attest-debuggable-ghcr
-        with:
-          subject-name: ${{ inputs.ghcrImageName || format('ghcr.io/{0}', github.repository) }}
-          subject-digest: ${{ steps.build.outputs.debuggable_digest }}
-          push-to-registry: true
 
       - name: Generate provenance attestation for stripped image at dockerhub
         uses: actions/attest-build-provenance@v2