Fix docker attestation fail on forked repo PRs #63

	name: Build Docker Image
	on:
	workflow_dispatch:
	workflow_call:
	pull_request:
	push:
	branches:
	- main
	- master
	tags:
	- 'v*'
	env:
	REGISTRY: ghcr.io
	IMAGE_NAME: ${{ github.repository }}
	jobs:
	build-and-publish-docker-image:
	runs-on: ubuntu-latest
	name: build-and-publish-docker-image
	permissions:
	packages: write
	contents: read
	attestations: write
	id-token: write
	steps:
	- uses: actions/checkout@v4
	- name: Login to GitHub Container Registry
	uses: docker/login-action@v3
	with:
	registry: ghcr.io
	username: ${{ github.repository_owner }}
	password: ${{ secrets.GITHUB_TOKEN }}
	- name: Extract metadata (tags, labels) for Docker
	id: meta
	uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
	with:
	images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
	tags: \|
	type=ref,event=branch
	type=ref,event=pr
	type=semver,pattern={{version}}
	type=semver,pattern={{major}}.{{minor}}
	- name: Free root space
	uses: almahmoud/free-root-space@main
	with:
	remove-gcc: false
	remove-cplusplus: false
	- name: Build and push Docker image
	id: push
	uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671
	if:
	with:
	context: .
	file: ./Dockerfile
	push: ${{ github.event_name != 'pull_request' }}
	tags: ${{ steps.meta.outputs.tags }}
	labels: ${{ steps.meta.outputs.labels }}
	- name: Generate artifact attestation
	uses: actions/attest-build-provenance@v1
	if: ${{ github.event_name != 'pull_request' }}
	with:
	subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
	subject-digest: ${{ steps.push.outputs.digest }}
	push-to-registry: true

Provide feedback