From 9860ba72d058b3127f11045345e3cde2d91c2b08 Mon Sep 17 00:00:00 2001 From: Kobi Hikri Date: Wed, 29 Jul 2026 02:10:40 +0300 Subject: [PATCH 1/2] ci: attach provenance and SBOM attestations to the published image --- .github/workflows/docker-image.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 51ee5014..5a887669 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -55,6 +55,8 @@ jobs: context: . file: ./Dockerfile push: ${{ env.SHOULD_PUBLISH == 'true' }} + provenance: mode=max + sbom: true platforms: linux/amd64,linux/arm64 tags: ${{ steps.meta.outputs.tags }} - labels: ${{ steps.meta.outputs.labels }} + labels: ${{ steps.meta.outputs.labels }} \ No newline at end of file From ba8e3dd7db1ec3c48b16581eb230633c082b7d7d Mon Sep 17 00:00:00 2001 From: Kobi Hikri Date: Wed, 29 Jul 2026 02:26:16 +0300 Subject: [PATCH 2/2] ci: restore trailing newline at end of file --- .github/workflows/docker-image.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 5a887669..fa60fa1c 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -59,4 +59,4 @@ jobs: sbom: true platforms: linux/amd64,linux/arm64 tags: ${{ steps.meta.outputs.tags }} - labels: ${{ steps.meta.outputs.labels }} \ No newline at end of file + labels: ${{ steps.meta.outputs.labels }}