feat(docker): generate SBOM attestation for the Docker image

This commit is contained in:
Orhun Parmaksız 2023-04-03 13:35:18 +03:00
parent 756ca556db
commit c59009b4a2
No known key found for this signature in database
GPG key ID: F83424824B3E4B90

View file

@ -77,6 +77,7 @@ jobs:
builder: ${{ steps.buildx.outputs.name }}
push: ${{ github.event_name != 'pull_request' }}
tags: ${{ steps.meta.outputs.tags }}
sbom: true
labels: ${{ steps.meta.outputs.labels }}
cache-from: type=local,src=/tmp/.buildx-cache
cache-to: type=local,dest=/tmp/.buildx-cache