From 12efa0d2d47982f1a38ad696ff4987bb33c2af6c Mon Sep 17 00:00:00 2001 From: Kobi Hikri Date: Wed, 29 Jul 2026 02:04:52 +0300 Subject: [PATCH 1/2] ci: attach provenance and SBOM attestations to the published image --- .github/workflows/docker.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 64e7390..83dbd17 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -57,6 +57,8 @@ jobs: with: context: . push: ${{ github.event_name != 'pull_request' }} + provenance: mode=max + sbom: true platforms: linux/amd64,linux/arm64 tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} @@ -69,4 +71,4 @@ jobs: PUB_VERTD_URL=https://vertd.vert.sh PUB_DISABLE_ALL_EXTERNAL_REQUESTS=false PUB_DONATION_URL=https://donations.vert.sh - PUB_STRIPE_KEY=pk_live_51TlrPaFTPjkhEGBSu5Kwy5jJQYxcX5yUUHXiH5g7Xzvb0NKzDqbooc126HjlW35uUkfAgQN2ruEoCuyQynoxpKaA00ojFgQ116 + PUB_STRIPE_KEY=pk_live_51TlrPaFTPjkhEGBSu5Kwy5jJQYxcX5yUUHXiH5g7Xzvb0NKzDqbooc126HjlW35uUkfAgQN2ruEoCuyQynoxpKaA00ojFgQ116 \ No newline at end of file From de7e2006e55f89cfe8f100a7cfa82a9505115b16 Mon Sep 17 00:00:00 2001 From: Kobi Hikri Date: Wed, 29 Jul 2026 02:26:05 +0300 Subject: [PATCH 2/2] ci: restore trailing newline at end of file --- .github/workflows/docker.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 83dbd17..b97ee04 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -71,4 +71,4 @@ jobs: PUB_VERTD_URL=https://vertd.vert.sh PUB_DISABLE_ALL_EXTERNAL_REQUESTS=false PUB_DONATION_URL=https://donations.vert.sh - PUB_STRIPE_KEY=pk_live_51TlrPaFTPjkhEGBSu5Kwy5jJQYxcX5yUUHXiH5g7Xzvb0NKzDqbooc126HjlW35uUkfAgQN2ruEoCuyQynoxpKaA00ojFgQ116 \ No newline at end of file + PUB_STRIPE_KEY=pk_live_51TlrPaFTPjkhEGBSu5Kwy5jJQYxcX5yUUHXiH5g7Xzvb0NKzDqbooc126HjlW35uUkfAgQN2ruEoCuyQynoxpKaA00ojFgQ116