Skip to content

Commit

Permalink
feat(docker): Add SBOM and provenance attestations (#8802)
Browse files Browse the repository at this point in the history
This adds metadata about the contents of our image, what it contains, and how it was built.
  • Loading branch information
gustavovalverde authored Aug 26, 2024
1 parent 37de457 commit 6cf34b2
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions .github/workflows/sub-build-docker-image.yml
Original file line number Diff line number Diff line change
Expand Up @@ -172,6 +172,10 @@ jobs:
FEATURES=${{ env.FEATURES }}
TEST_FEATURES=${{ env.TEST_FEATURES }}
push: true
# It's recommended to build images with max-level provenance attestations
# https://docs.docker.com/build/ci/github-actions/attestations/
provenance: mode=max
sbom: true
# Don't read from the cache if the caller disabled it.
# https://docs.docker.com/engine/reference/commandline/buildx_build/#options
no-cache: ${{ inputs.no_cache }}

0 comments on commit 6cf34b2

Please sign in to comment.