From 083908080e93a30800c96b8c066316fb10c7603f Mon Sep 17 00:00:00 2001 From: Doug Goldstein Date: Wed, 27 Aug 2025 15:40:37 -0500 Subject: [PATCH] ci: avoid hardcoded dexidp GitHub org Two changes here, the ghcr.io image is made using the github.repository variable so the attestation should be as well. The Docker Hub image should only be built when the repo matches the upstream official repo. Signed-off-by: Doug Goldstein --- .github/workflows/artifacts.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/artifacts.yaml b/.github/workflows/artifacts.yaml index 1adc048d..2ed7c6df 100644 --- a/.github/workflows/artifacts.yaml +++ b/.github/workflows/artifacts.yaml @@ -75,7 +75,7 @@ jobs: with: images: | ${{ steps.image-name.outputs.value }} - dexidp/dex + ${{ github.repository == 'dexidp/dex' && 'dexidp/dex' || '' }} flavor: | latest = false tags: | @@ -186,7 +186,7 @@ jobs: - name: Generate build provenance attestation uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.4.0 with: - subject-name: ghcr.io/dexidp/dex + subject-name: ghcr.io/${{ github.repository }} subject-digest: ${{ steps.build.outputs.digest }} push-to-registry: true if: inputs.publish