testing attestations

2023-03-10 22:04:47 -05:00
parent 22ac942378
commit 5a18909314
1 changed files with 3 additions and 0 deletions
--- a/.github/workflows/reusable-docker-build.yaml
+++ b/.github/workflows/reusable-docker-build.yaml
@@ -163,6 +163,9 @@ jobs:
          push: true
          tags: ${{ steps.docker_meta.outputs.tags }}
          labels: ${{ steps.docker_meta.outputs.labels }}
+          # add attestations for provenance and sbom
+          provenance: true
+          sbom: true
      -
        # If PR, put image tags in the PR comments
        # from https://github.com/marketplace/actions/create-or-update-comment