ci: build and publish image with sbom attestation

Signed-off-by: Yang Chiu <yang.chiu@suse.com> (cherry picked from commit d5cdb26)
longhorn · Jul 22, 2024 · 3f9dcd4 · 3f9dcd4
1 parent 3b98685
commit 3f9dcd4
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -80,6 +80,7 @@ jobs:
         platforms: linux/amd64,linux/arm64
         tags: longhornio/backing-image-manager:${{ env.branch }}-head
         file: package/Dockerfile
+        sbom: true
 
     - name: docker-publish-with-tag
       if: ${{ startsWith(github.ref, 'refs/tags/') }}
@@ -90,3 +91,4 @@ jobs:
         platforms: linux/amd64,linux/arm64
         tags: longhornio/backing-image-manager:${{ github.ref_name }}
         file: package/Dockerfile
+        sbom: true