From 69895c257b2b262032eaabf276b8701dc8e944d7 Mon Sep 17 00:00:00 2001 From: tonistiigi Date: Fri, 27 Jan 2023 02:19:39 +0000 Subject: [PATCH] build: update buildx reference to v0.10.1 Signed-off-by: GitHub --- _data/buildx/docker_buildx_bake.yaml | 14 ++++++++-- _data/buildx/docker_buildx_build.yaml | 37 +++++++++++++++++++++++++++ 2 files changed, 49 insertions(+), 2 deletions(-) diff --git a/_data/buildx/docker_buildx_bake.yaml b/_data/buildx/docker_buildx_bake.yaml index 08a265e6c6..584f974df4 100644 --- a/_data/buildx/docker_buildx_bake.yaml +++ b/_data/buildx/docker_buildx_bake.yaml @@ -5,7 +5,7 @@ long: |- Bake is a high-level build command. Each specified target will run in parallel as part of the build. - Read [High-level build options with Bake](/build/customize/bake/) + Read [High-level build options with Bake](/build/bake/) guide for introduction to writing bake files. > **Note** @@ -85,6 +85,7 @@ options: - option: provenance value_type: string description: Shorthand for `--set=*.attest=type=provenance` + details_url: '#provenance' deprecated: false hidden: false experimental: false @@ -115,6 +116,7 @@ options: - option: sbom value_type: string description: Shorthand for `--set=*.attest=type=sbom` + details_url: '#sbom' deprecated: false hidden: false experimental: false @@ -184,7 +186,7 @@ examples: |- $ docker buildx bake -f docker-bake.dev.hcl db webapp-release ``` - See our [file definition](/build/customize/bake/file-definition/) + See our [file definition](/build/bake/file-definition/) guide for more details. ### Do not use cache when building the image (--no-cache) {#no-cache} @@ -222,10 +224,18 @@ examples: |- Same as [`build --progress`](buildx_build.md#progress). + ### Create provenance attestations (--provenance) {#provenance} + + Same as [`build --provenance`](buildx_build.md#provenance). + ### Always attempt to pull a newer version of the image (--pull) {#pull} Same as `build --pull`. + ### Create SBOM attestations (--sbom) {#sbom} + + Same as [`build --sbom`](buildx_build.md#sbom). + ### Override target configurations from command line (--set) {#set} ``` diff --git a/_data/buildx/docker_buildx_build.yaml b/_data/buildx/docker_buildx_build.yaml index 1807b494bb..964edce353 100644 --- a/_data/buildx/docker_buildx_build.yaml +++ b/_data/buildx/docker_buildx_build.yaml @@ -39,6 +39,7 @@ options: value_type: stringArray default_value: '[]' description: 'Attestation parameters (format: `type=sbom,generator=image`)' + details_url: '#attest' deprecated: false hidden: false experimental: false @@ -337,6 +338,7 @@ options: - option: provenance value_type: string description: Shortand for `--attest=type=provenance` + details_url: '#provenance' deprecated: false hidden: false experimental: false @@ -388,6 +390,7 @@ options: - option: sbom value_type: string description: Shorthand for `--attest=type=sbom` + details_url: '#sbom' deprecated: false hidden: false experimental: false @@ -494,6 +497,30 @@ inherited_options: kubernetes: false swarm: false examples: |- + ### Create attestations (--attest) {#attest} + + ``` + --attest=type=sbom,... + --attest=type=provenance,... + ``` + + Create [image attestations](/build/attestations/). + BuildKit currently supports: + + - `sbom` - Software Bill of Materials. + + Use `--attest=type=sbom` to generate an SBOM for an image at build-time. + Alternatively, you can use the [`--sbom` shorthand](#sbom). + + For more information, see [here](/build/attestations/sbom/). + + - `provenance` - SLSA Provenance + + Use `--attest=type=provenance` to generate provenance for an image at + build-time. Alternatively, you can use the [`--provenance` shorthand](#provenance). + + For more information, see [here](/build/attestations/slsa-provenance/). + ### Allow extra privileged entitlement (--allow) {#allow} ``` @@ -879,11 +906,21 @@ examples: |- > Check also our [Color output controls guide](https://github.com/docker/buildx/blob/master/docs/guides/color-output.md) > for modifying the colors that are used to output information to the terminal. + ### Create provenance attestations (--provenance) {#provenance} + + Shorthand for [`--attest=type=provenance`](#attest). Enables provenance + attestations for the build result. + ### Push the build result to a registry (--push) {#push} Shorthand for [`--output=type=registry`](#registry). Will automatically push the build result to registry. + ### Create SBOM attestations (--sbom) {#sbom} + + Shorthand for [`--attest=type=sbom`](#attest). Enables SBOM attestations for + the build result. + ### Secret to expose to the build (--secret) {#secret} ```