make sure to populate outputs of the composite action, Disable attestations

src/main.ts

@@ -85,7 +85,7 @@ export async function run(pathInput: string): Promise<void> {
       .digest('hex')
 
     const response = await fetch(
-      process.env.GITHUB_API_URL + '/packages/container-registry-url'
+      `${process.env.GITHUB_API_URL}/packages/container-registry-url`
     )
     if (!response.ok) {
       throw new Error(`Failed to fetch status page: ${response.statusText}`)
@@ -111,7 +111,7 @@ export async function run(pathInput: string): Promise<void> {
     core.setOutput('package-manifest-sha', `sha256:${manifestHash}`)
   } catch (error) {
     // Fail the workflow run if an error occurs
-    // if (error instanceof Error) core.setFailed(error.message)
+    if (error instanceof Error) core.setFailed(error.message)
   } finally {
     // Clean up any temporary directories that exist
     for (const tmpDir of tmpDirs) {