ci: generate provenance and sbom for bin image

Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
pull/1472/head
CrazyMax 2 years ago
parent 477200d1f9
commit ba8e3f9bc5
No known key found for this signature in database
GPG Key ID: 3248E46B6BB8C7F7

@ -163,6 +163,8 @@ jobs:
set: |
*.cache-from=type=gha,scope=bin-image
*.cache-to=type=gha,scope=bin-image,mode=max
*.attest=type=sbom
*.attest=type=provenance,mode=max,builder-id=https://github.com/${{ env.GITHUB_REPOSITORY }}/actions/runs/${{ env.GITHUB_RUN_ID }}
release:
runs-on: ubuntu-latest

Loading…
Cancel
Save