diff --git a/content/scout/policy/_index.md b/content/scout/policy/_index.md index f910ffafd5..3598157c59 100644 --- a/content/scout/policy/_index.md +++ b/content/scout/policy/_index.md @@ -169,10 +169,13 @@ update your build command to attach these attestations at build-time: $ docker buildx build --provenance=true --sbom=true -t --push . ``` -For more information about -building with attestations, see +For more information about building with attestations, see [Attestations](../../build/metadata/attestations/_index.md). +If you're using GitHub Actions to build and push your images, +learn how you can [configure the action](/build/ci/github-actions/attestations.md) +to apply SBOM and provenance attestations. + ### Default non-root user By default, containers run as the `root` superuser with full system