attest test

Author: rwestphal

.github/workflows/ci.yaml

@@ -92,7 +92,11 @@ jobs:
   push-image:
     name: Docker Image Build
     runs-on: ubuntu-latest
-    if: github.ref == 'refs/heads/master' && github.repository_owner == 'holo-routing'
+    #if: github.ref == 'refs/heads/master' && github.repository_owner == 'holo-routing'
+    permissions:
+      id-token: write
+      attestations: write
+      #packages: write
     steps:
       - uses: actions/checkout@v4
       - uses: docker/login-action@v3
@@ -106,3 +110,13 @@ jobs:
           docker push ghcr.io/holo-routing/holod:latest
           docker build . -f docker/Dockerfile.holo-bundle --tag ghcr.io/holo-routing/holo-bundle:latest
           docker push ghcr.io/holo-routing/holo-bundle:latest
+      - name: Attest holod image
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-name: ghcr.io/holo-routing/holod:latest
+          push-to-registry: true
+      - name: Attest holo-bundle image
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-name: ghcr.io/holo-routing/holo-bundle:latest
+          push-to-registry: true