From 9d137cf72006c1b2aad6104aa94d9cee500225e0 Mon Sep 17 00:00:00 2001
From: Lindon Aliu <91671191+LindonAliu@users.noreply.github.com>
Date: Mon, 8 Sep 2025 19:44:29 +0200
Subject: [PATCH] fix: GHCR attestation example by listing GHCR first in
 metadata images

The attestation step targets GHCR, but docker/build-push-action exposes the
digest for the first image produced by docker/metadata-action. The previous
doc snippet listed Docker Hub first, so the attestation attempted to fetch a
Docker Hub digest from GHCR, resulting in 404.
---
 .../actions/tutorials/publish-packages/publish-docker-images.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/content/actions/tutorials/publish-packages/publish-docker-images.md b/content/actions/tutorials/publish-packages/publish-docker-images.md
index db85a5870ce8..214e85e78b00 100644
--- a/content/actions/tutorials/publish-packages/publish-docker-images.md
+++ b/content/actions/tutorials/publish-packages/publish-docker-images.md
@@ -215,8 +215,8 @@ jobs:
         uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
         with:
           images: |
-            my-docker-hub-namespace/my-docker-hub-repository
             {% data reusables.package_registry.container-registry-hostname %}/{% raw %}${{ github.repository }}{% endraw %}
+            my-docker-hub-namespace/my-docker-hub-repository
 
       - name: Build and push Docker images
         id: push