From 13f7a848aea6a40945653266057bd0240a50bccd Mon Sep 17 00:00:00 2001
From: JP Hastings-Spital <jphastings@gmail.com>
Date: Mon, 15 Jul 2024 16:28:45 +0100
Subject: [PATCH] Fix indiekit docker container

And build only when needed
---
 .github/workflows/indiekit-docker.yml | 9 ++++++++-
 .github/workflows/publish.yml         | 4 ++++
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/indiekit-docker.yml b/.github/workflows/indiekit-docker.yml
index 6f081b58..765aff0d 100644
--- a/.github/workflows/indiekit-docker.yml
+++ b/.github/workflows/indiekit-docker.yml
@@ -5,13 +5,14 @@ on:
     branches: ["main"]
     paths:
       - indiekit/**
+      - .github/workflows/indiekit-docker.yml
 
   workflow_dispatch:
 
 permissions:
   contents: read
   packages: write
-  attestations: write
+  id-token: write
 
 concurrency:
   group: "docker"
@@ -49,3 +50,9 @@ jobs:
           push: true
           tags: indiekit
           labels: ${{ steps.meta.outputs.labels }}
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index bdc24766..9dc6dd08 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -3,6 +3,10 @@ name: Deploy Hugo site to Pages
 on:
   push:
     branches: ["main"]
+    paths-ignore:
+      - indiekit/**
+      - .github/workflows/indiekit-docker.yml
+      - tools/**
   schedule:
     # Rebuild every day, to update 'year relative' dates, change now page & calendar
     - cron: '0 0 * * *'