chore: bump Vib version, update docs

Signed-off-by: K.B.Dharun Krishna <[email protected]>

.github/workflows/vib-build.yml

@@ -35,10 +35,10 @@ jobs:
     steps:
     - uses: actions/checkout@v4
 
-    - uses: vanilla-os/[email protected].2
+    - uses: vanilla-os/[email protected].4
       with:
         recipe: 'recipe.yml'
-        plugins: 'Vanilla-OS/vib-fsguard:v1.5.2'
+        plugins: 'Vanilla-OS/vib-fsguard:v1.5.3'
 
     - uses: actions/upload-artifact@v4
       with:

README.md

@@ -14,3 +14,11 @@ Vanilla OS Desktop experience with GNOME.
 vib build recipe.yml
 podman image build -t vanillaos/desktop .
 ```
+
+## Verify Image Build Provenance Attestation
+
+All the image builds/pushes are attested for build provenance and integrity using the [attest-build-provenance`](https://github.com/actions/attest-build-provenance) action. The attestations can be verified [here](https://github.com/Vanilla-OS/desktop-image/attestations) or by having the latest version of [GitHub CLI](https://github.com/cli/cli/releases/latest) installed in your system. Then, execute the following command:
+
+```sh
+gh attestation verify oci://ghcr.io/vanilla-os/desktop:main --owner Vanilla-OS
+```

recipe.yml

@@ -10,7 +10,8 @@ stages:
   args:
     DEBIAN_FRONTEND: noninteractive
   runs:
-  - echo 'APT::Install-Recommends "1";' > /etc/apt/apt.conf.d/01norecommends
+    commands:
+      - echo 'APT::Install-Recommends "1";' > /etc/apt/apt.conf.d/01norecommends
 
   modules:
   - name: init-setup