From 8532fc959a5590b76c7c0e1e7d644d2d46657531 Mon Sep 17 00:00:00 2001
From: Giorgio Ravera <giorgio.ravera@gmail.com>
Date: Mon, 26 Jan 2026 21:55:05 +0100
Subject: [PATCH] updated docker-publish.yaml

---
 .github/workflows/docker-publish.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/docker-publish.yaml b/.github/workflows/docker-publish.yaml
index 431a44c..b01ef93 100644
--- a/.github/workflows/docker-publish.yaml
+++ b/.github/workflows/docker-publish.yaml
@@ -8,7 +8,7 @@ on:
 permissions:
   contents: read
   packages: write
-  # id-token: write   # <- uncomment if you enable provenance/SBOM
+  id-token: write
 
 env:
   # Lowercase repo name for GHCR robustness
@@ -62,4 +62,4 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=gha
           cache-to: type=gha,mode=max
-          # provenance: true   # <- enable if you granted id-token: write
+          provenance: true
-- 
2.47.3