build: provenance is minimal by default

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
This commit is contained in:
CrazyMax 2025-05-20 17:10:33 +02:00
parent ed275b6a10
commit b147e9006b
No known key found for this signature in database
GPG Key ID: ADE44D8C9D44FBE4
2 changed files with 3 additions and 3 deletions

View File

@ -70,7 +70,7 @@ $ docker buildx build --sbom=true --provenance=true .
> You can disable provenance attestations using the `--provenance=false` flag,
> or by setting the [`BUILDX_NO_DEFAULT_ATTESTATIONS`](/manuals/build/building/variables.md#buildx_no_default_attestations) environment variable.
>
> Using the `--provenance=true` flag attaches provenance attestations with `mode=max`
> Using the `--provenance=true` flag attaches provenance attestations with `mode=min`
> by default. See [Provenance attestation](./slsa-provenance.md) for more details.
BuildKit generates the attestations when building the image. The attestation

View File

@ -41,8 +41,8 @@ For an example on how to add provenance attestations with GitHub Actions, see
## Mode
You can use the `mode` parameter to define the level of detail to be included in
the provenance attestation. Supported values are `mode=min`, and `mode=max`
(default).
the provenance attestation. Supported values are `mode=min` (default) and
`mode=max`.
### Min