ci: generate provenance and sbom for bin image

Signed-off-by: CrazyMax <[email protected]>
docker · Dec 15, 2022 · ba8e3f9 · ba8e3f9
1 parent 477200d
commit ba8e3f9
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -163,6 +163,8 @@ jobs:
           set: |
             *.cache-from=type=gha,scope=bin-image
             *.cache-to=type=gha,scope=bin-image,mode=max
+            *.attest=type=sbom
+            *.attest=type=provenance,mode=max,builder-id=https://github.com/${{ env.GITHUB_REPOSITORY }}/actions/runs/${{ env.GITHUB_RUN_ID }}
 
   release:
     runs-on: ubuntu-latest