Add source code label to Dockerfile to link to ghcr

.github/workflows/build.yaml

@@ -3,19 +3,28 @@ on: push
 jobs:
   Build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      attestations: write
+      id-token: write
+
     steps:
       - uses: actions/checkout@v4
+
       - uses: docker/login-action@v3
         with:
           registry: ghcr.io
-          username: ${{ github.repository_owner }}
+          username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
+
       - uses: docker/metadata-action@v5
         with:
           images: |
-            ${{ github.repository_owner }}/${{ github.repository }}
             ghcr.io/${{ github.repository }}
+            
       - uses: docker/bake-action@v5
+
         with:
           files: |
             ./docker-bake.hcl

Dockerfile

@@ -1,14 +1,12 @@
-# docker build -t spring-app .
-# docker run --name spring-app -d -p 8080:8080 spring-app
-
+# docker run --name spring-boilerplate -d -p 8080:8080 spring-boilerplate
 FROM maven:3.9.8-eclipse-temurin-21 as build
 
 COPY pom.xml .
 RUN --mount=type=cache,target=/root/.m2,rw mvn -B dependency:go-offline
 COPY src src
 RUN --mount=type=cache,target=/root/.m2,rw mvn -B package
 
-FROM eclipse-temurin:21
+FROM eclipse-temurin:21-jammy
 
 WORKDIR /app
 COPY --from=build target/*.jar ./app.jar
@@ -25,4 +23,3 @@ ENTRYPOINT ["java", "-javaagent:/app/opentelemetry-javaagent.jar", "-jar", "app.
 
 EXPOSE 8080
 HEALTHCHECK CMD curl -f http://0.0.0.0:8080/health || exit 1
-

docker-bake.hcl

@@ -4,5 +4,4 @@ target "default" {
   inherits = ["docker-metadata-action"]
   context = "."
   dockerfile = "Dockerfile"
-  tags = ["spring-boilerplate:latest"]
 }