diff --git a/content/build/attestations/sbom.md b/content/build/attestations/sbom.md index 3d6eaf3979..a5cf608183 100644 --- a/content/build/attestations/sbom.md +++ b/content/build/attestations/sbom.md @@ -37,6 +37,9 @@ $ docker buildx build --tag /: \ Alternatively, you can use the shorthand `--sbom=true` option instead of `--attest type=sbom`. +For an example on how to add SBOM attestations with GitHub Actions, see +[Add attestations with GitHub Actions](../ci/github-actions/attestations.md). + ## Verify SBOM attestations Always validate the generated SBOM for your image before you push your image to a registry. diff --git a/content/build/attestations/slsa-provenance.md b/content/build/attestations/slsa-provenance.md index 6cf110cb4b..a4410c3b53 100644 --- a/content/build/attestations/slsa-provenance.md +++ b/content/build/attestations/slsa-provenance.md @@ -33,6 +33,9 @@ $ docker buildx build --tag /: \ Alternatively, you can use the shorthand `--provenance=true` option instead of `--attest type=provenance`. To specify the `mode` parameter using the shorthand option, use: `--provenance=mode=max`. +For an example on how to add provenance attestations with GitHub Actions, see +[Add attestations with GitHub Actions](../ci/github-actions/attestations.md). + ## Mode You can use the `mode` parameter to define the level of detail to be included in