You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Fix GHCR attestation example by listing GHCR first in metadata images #40291
Why should the docs be changed? What use cases does it support?
The current order can cause the attestation to fetch a Docker Hub digest from GHCR, which returns 404. This affects users who push to multiple registries but attest only GHCR. The change prevents false failures and supports secure supply-chain workflows (SLSA-style provenance, compliance, CI reliability).
Thanks for opening this issue. A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.
A stale label has been added to this issue, because it has been open for 30 days with no activity. If you think this issue should remain open, please add a new comment.
Activity
welcome commentedon Sep 8, 2025
Thanks for opening this issue. A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.
github-actions commentedon Nov 25, 2025
A stale label has been added to this issue, because it has been open for 30 days with no activity. If you think this issue should remain open, please add a new comment.
Sharra-writes commentedon Jul 20, 2026
It looks like we fixed this internally, so I'm going to close it.