ci: fix Generate artifact attestation subject-path

.github/workflows/publish.yml

@@ -3,7 +3,7 @@ name: Publish Docker image
 on:
   push:
     branches:
-    - master
+      - master
 
 jobs:
   push_to_registry:
@@ -15,34 +15,24 @@ jobs:
       attestations: write
       id-token: write
     steps:
-      - name: Check out the repo
+      - name: Checkout
         uses: actions/checkout@v4
-
-      - name: Log in to Docker Hub
+      - name: Login to GitHub Container Registry
         uses: docker/login-action@v3
         with:
+          registry: ${{ env.REGISTRY }}
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Extract metadata (tags, labels) for Docker
-        id: meta
-        uses: docker/metadata-action@v5
-        with:
-          images: sjdonado/url-shortener
-
-      - name: Build and push Docker image
+      - name: Build and push image
         id: push
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v5.0.0
         with:
           context: .
-          file: ./Dockerfile
           push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-      
-      - name: Generate artifact attestation
+          tags: sjdonado/url-shortener:latest
+      - name: Attest
         uses: actions/attest-build-provenance@v1
+        id: attest
         with:
           subject-name: sjdonado/url-shortener
           subject-digest: ${{ steps.push.outputs.digest }}
-          push-to-registry: true