From 56b464fe58678d4120039fb5cfa19b6be6ce73ce Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Alexis=20M=C3=A9taireau?= <alexis@freedom.press>
Date: Mon, 20 Jan 2025 15:16:13 +0100
Subject: [PATCH] Add the tag to the subject

---
 .github/workflows/release-container-image.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release-container-image.yml b/.github/workflows/release-container-image.yml
index 7177e93..752c27f 100644
--- a/.github/workflows/release-container-image.yml
+++ b/.github/workflows/release-container-image.yml
@@ -51,10 +51,11 @@ jobs:
           podman tag dangerzone.rocks/dangerzone:$TAG "$FINAL_IMAGE_NAME"
           podman push "$FINAL_IMAGE_NAME" --digestfile=digest
           echo "digest=$(cat digest)" >> "$GITHUB_OUTPUT"
+          echo "tag=$TAG" >> "$GITHUB_OUTPUT"
 
       - name: Generate artifact attestation
         uses: actions/attest-build-provenance@v1
         with:
-          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.build-image.outputs.tag }}
           subject-digest: "${{ steps.build-image.outputs.digest }}"
           push-to-registry: true