From df4d1f30f1b56d4988e958c9c7302852ed494927 Mon Sep 17 00:00:00 2001 From: Kobi Hikri Date: Wed, 29 Jul 2026 02:02:04 +0300 Subject: [PATCH 1/2] ci: attach provenance and SBOM attestations to the published image --- .github/workflows/docker.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 7ce951dc7..509df4ac0 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -56,6 +56,8 @@ jobs: file: ./Dockerfile platforms: linux/amd64,linux/arm/v7,linux/arm64,linux/s390x push: true + provenance: mode=max + sbom: true tags: | ${{ env.DOCKER_TAG }} ghcr.io/${{ env.DOCKER_TAG }} @@ -66,6 +68,8 @@ jobs: file: ./Dockerfile.alpine platforms: linux/amd64,linux/arm/v7,linux/arm64,linux/s390x push: true + provenance: mode=max + sbom: true tags: | ${{ env.ALPINE_TAG }} - ghcr.io/${{ env.ALPINE_TAG }} + ghcr.io/${{ env.ALPINE_TAG }} \ No newline at end of file From a9b2dbb953bbe4d154478b3055f553bb31793e2d Mon Sep 17 00:00:00 2001 From: Kobi Hikri Date: Wed, 29 Jul 2026 02:26:03 +0300 Subject: [PATCH 2/2] ci: restore trailing newline at end of file --- .github/workflows/docker.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 509df4ac0..357a03fc1 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -72,4 +72,4 @@ jobs: sbom: true tags: | ${{ env.ALPINE_TAG }} - ghcr.io/${{ env.ALPINE_TAG }} \ No newline at end of file + ghcr.io/${{ env.ALPINE_TAG }}