ci: add explicit provenance and enable sbom

nginx-proxy · Dec 19, 2023 · cecc4fc · cecc4fc
1 parent 9c2bad4
commit cecc4fc
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/build-publish.yml b/.github/workflows/build-publish.yml
@@ -74,7 +74,9 @@ jobs:
           context: .
           build-args: GIT_DESCRIBE=${{ steps.acme-companion_version.outputs.VERSION }}
           platforms: linux/amd64,linux/arm64,linux/arm/v7
+          sbom: true
           push: true
+          provenance: mode=max
           tags: ${{ steps.docker_meta.outputs.tags }}
           labels: ${{ steps.docker_meta.outputs.labels }}
           cache-from: type=gha