Merge pull request #17 from BretFisher/add-attestations

testing attestations

.github/workflows/call-local-docker-build.yaml

@@ -18,17 +18,6 @@ on:
 
 jobs:
 
-  testing-event-messages:
-    if: always()
-    runs-on: ubuntu-latest
-    steps:
-      -
-        run: |
-          echo "event_name: ${{ github.event_name }}"
-          # echo "event.workflow_run: ${{ github.event.workflow_run }}"
-          echo "event.head_commit: ${{ github.event.head_commit }}"
-          echo "event.head_commit.message: ${{ github.event.head_commit.message }}"
-
   call-docker-build:
 
     name: Call Docker Build

.github/workflows/reusable-docker-build.yaml

@@ -163,6 +163,9 @@ jobs:
           push: true
           tags: ${{ steps.docker_meta.outputs.tags }}
           labels: ${{ steps.docker_meta.outputs.labels }}
+          # add attestations for provenance and sbom
+          provenance: true
+          sbom: true
       -
         # If PR, put image tags in the PR comments
         # from https://github.com/marketplace/actions/create-or-update-comment