ci: add explicit provenance and enable sbom

nginx-proxy · Dec 19, 2023 · daf8001 · daf8001
1 parent fd648c3
commit daf8001
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/build-publish.yml b/.github/workflows/build-publish.yml
@@ -72,7 +72,9 @@ jobs:
           context: .
           platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/ppc64le,linux/s390x
           file: Dockerfile.${{ matrix.base }}
+          sbom: true
           push: true
+          provenance: mode=max
           tags: ${{ steps.docker_meta.outputs.tags }}
           labels: ${{ steps.docker_meta.outputs.labels }}
           cache-from: type=gha