updated docker-publish.yaml

diff --git a/.github/workflows/docker-publish.yaml b/.github/workflows/docker-publish.yaml
index 431a44cdce917490a3f14fcf549f1a74bf15bcd8..b01ef9350bcf5b546a1e862758daac3fd11a9b7e 100644 (file)
--- a/.github/workflows/docker-publish.yaml
+++ b/.github/workflows/docker-publish.yaml
@@ -8,7 +8,7 @@ on:
 permissions:
   contents: read
   packages: write
-  # id-token: write   # <- uncomment if you enable provenance/SBOM
+  id-token: write
 
 env:
   # Lowercase repo name for GHCR robustness
@@ -62,4 +62,4 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=gha
           cache-to: type=gha,mode=max
-          # provenance: true   # <- enable if you granted id-token: write
+          provenance: true