diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index a19d7b4..7c8826a 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -142,17 +142,14 @@ jobs: # image_id: ${{ steps.push.outputs.imageid }} # image_tag: ${{ steps.meta.outputs.tags }} - # TODO: uncomment once the repository is public - # # This step generates an artifact attestation for the image, # which is an unforgeable statement about where and how it was # built. It increases supply chain security for people who # consume the image. For more information, see # "[AUTOTITLE](/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds)." - - # - name: Generate artifact attestation - # uses: actions/attest-build-provenance@v1 - # with: - # subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}} - # subject-digest: ${{ steps.push.outputs.digest }} - # push-to-registry: true + - name: Generate artifact attestation + uses: actions/attest-build-provenance@v1 + with: + subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}} + subject-digest: ${{ steps.push.outputs.digest }} + push-to-registry: true diff --git a/Dockerfile b/Dockerfile index 433d873..d8c8704 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ # inspired by https://github.com/phadej/docker-haskell-example/blob/master/Dockerfile -FROM haskell:9.6.3 as build +FROM haskell:9.6.3 AS build RUN apt-get update -y && \ apt-get upgrade -y && \ @@ -21,7 +21,7 @@ COPY . /app RUN cabal build all # Make final binary a bit smaller -RUN strip dist-newstyle/build/x86_64-linux/ghc-9.6.3/leios-0.1.0.0/x/leios/noopt/build/leios/leios +RUN strip dist-newstyle/build/x86_64-linux/ghc-9.6.3/leios-sim-0.1.0.0/x/leios/build/leios/leios FROM ubuntu:22.04 @@ -29,6 +29,6 @@ WORKDIR /app EXPOSE 8091 COPY --from=build /app/leios-sim/* /app/ -COPY --from=build /app/dist-newstyle/build/x86_64-linux/ghc-9.6.3/leios-0.1.0.0/x/leios/noopt/build/leios/leios /app +COPY --from=build /app/dist-newstyle/build/x86_64-linux/ghc-9.6.3/leios-sim-0.1.0.0/x/leios/build/leios/leios /app ENTRYPOINT ["/app/leios"]