mirror of https://github.com/VERT-sh/VERT.git
ci: attach provenance and SBOM attestations to the published image
This commit is contained in:
parent
e1c83ba4ad
commit
12efa0d2d4
|
|
@ -57,6 +57,8 @@ jobs:
|
|||
with:
|
||||
context: .
|
||||
push: ${{ github.event_name != 'pull_request' }}
|
||||
provenance: mode=max
|
||||
sbom: true
|
||||
platforms: linux/amd64,linux/arm64
|
||||
tags: ${{ steps.meta.outputs.tags }}
|
||||
labels: ${{ steps.meta.outputs.labels }}
|
||||
|
|
@ -69,4 +71,4 @@ jobs:
|
|||
PUB_VERTD_URL=https://vertd.vert.sh
|
||||
PUB_DISABLE_ALL_EXTERNAL_REQUESTS=false
|
||||
PUB_DONATION_URL=https://donations.vert.sh
|
||||
PUB_STRIPE_KEY=pk_live_51TlrPaFTPjkhEGBSu5Kwy5jJQYxcX5yUUHXiH5g7Xzvb0NKzDqbooc126HjlW35uUkfAgQN2ruEoCuyQynoxpKaA00ojFgQ116
|
||||
PUB_STRIPE_KEY=pk_live_51TlrPaFTPjkhEGBSu5Kwy5jJQYxcX5yUUHXiH5g7Xzvb0NKzDqbooc126HjlW35uUkfAgQN2ruEoCuyQynoxpKaA00ojFgQ116
|
||||
Loading…
Reference in New Issue