[GH-ISSUE #860] Add Attestations to Docker Images #560

New issue

Open

opened 2026-03-02 11:50:53 +03:00 by kerem · 0 comments

kerem commented

2026-03-02 11:50:53 +03:00

Owner

Originally created by @icco on GitHub (Jan 11, 2025).
Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/860

Describe the feature you'd like

Add https://github.com/actions/attest-build-provenance to all docker build workflows

See https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds for more details

Describe the benefits this would bring to existing Hoarder users

This would let folks running the hoarder app validate that the containers they are running were built on github.

Can the goal of this request already be achieved via other means?

Have you searched for an existing open/closed issue?

I have searched for existing issues and none cover my fundamental request

Additional context

No response

Originally created by @icco on GitHub (Jan 11, 2025). Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/860 ### Describe the feature you'd like Add https://github.com/actions/attest-build-provenance to all docker build workflows See https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds for more details ### Describe the benefits this would bring to existing Hoarder users This would let folks running the hoarder app validate that the containers they are running were built on github. ### Can the goal of this request already be achieved via other means? No ### Have you searched for an existing open/closed issue? - [X] I have searched for existing issues and none cover my fundamental request ### Additional context _No response_