chore: use build-and-publish digest output (#13083)

Signed-off-by: Justin Marquis <34fathombelow@protonmail.com>

.github/workflows/image.yaml

@@ -80,7 +80,6 @@ jobs:
   build-and-publish-provenance: # Push attestations to GHCR, latest image is polluting quay.io
     needs:
       - build-and-publish
-      - set-vars
     permissions:
       actions: read # for detecting the Github Actions environment.
       id-token: write # for creating OIDC tokens for signing.
@@ -90,7 +89,7 @@ jobs:
     uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.5.0
     with:
       image: ghcr.io/argoproj/argo-cd/argocd
-      digest: ${{ needs.set-vars.outputs.image-tag }}
+      digest: ${{ needs.build-and-publish.outputs.image-digest }}
       registry-username: ${{ github.actor }}
     secrets:
       registry-password: ${{ secrets.GITHUB_TOKEN }}