scout: xref from policy to gha attestations example

Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
This commit is contained in:
David Karlsson 2024-08-20 16:34:20 +02:00
parent 1bf12eaae3
commit 79d7fc891d
1 changed files with 5 additions and 2 deletions

View File

@ -169,10 +169,13 @@ update your build command to attach these attestations at build-time:
$ docker buildx build --provenance=true --sbom=true -t <IMAGE> --push .
```
For more information about
building with attestations, see
For more information about building with attestations, see
[Attestations](../../build/metadata/attestations/_index.md).
If you're using GitHub Actions to build and push your images,
learn how you can [configure the action](/build/ci/github-actions/attestations.md)
to apply SBOM and provenance attestations.
### Default non-root user
By default, containers run as the `root` superuser with full system