Add SBOM and provenance (#164)

chorrell · Dec 24, 2023 · e6c4592 · e6c4592
1 parent 3b8531e
commit e6c4592
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/dockerimage.yml b/.github/workflows/dockerimage.yml
@@ -119,11 +119,13 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Build Image
+      - name: Build and push Image
         uses: docker/build-push-action@v5
         with:
           context: .
           platforms: linux/amd64,linux/arm64
           push: true
+          provenance: mode=max
+          sbom: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}