Update SECURITY.md

[David-Allen-Arteaga]

gh repo clone `actions/attest-build-provenanceLabels:
[[[
TestId: dGVzdGluZy0zZDllOTM4My01NmE2LTQyOTMtOTY3Ny0xNmU0ZDlhNWVkZDY=
]]]
Fixes #

[David-Allen-Arteaga]

name: build-attested-image

on:
push:
branches: [main]

jobs:
build:
runs-on: ubuntu-latest
permissions:
id-token: write
packages: write
contents: read
attestations: write
env:
REGISTRY: ghcr.io
IMAGE_NAME: ${{ github.repository }}

steps:
  - name: Checkout
    uses: actions/checkout@v4
  - name: Login to GitHub Container Registry
    uses: docker/login-action@v3
    with:
      registry: ${{ env.REGISTRY }}
      username: ${{ github.actor }}
      password: ${{ secrets.GITHUB_TOKEN }}
  - name: Build and push image
    id: push
    uses: docker/[email protected]
    with:
      context: .
      push: true
      tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
  - name: Attest
    uses: actions/attest-build-provenance@v1
    id: \\security.md\\
    with:
      subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
      subject-digest: ${{ steps.push.outputs.digest }}
      push-to-registry: true

[David-Allen-Arteaga]

gh pr checkout 138