From 31705b9a1947f71c39825b53cd0c66307658278d Mon Sep 17 00:00:00 2001 From: David Karlsson <35727626+dvdksn@users.noreply.github.com> Date: Wed, 20 Dec 2023 13:21:31 +0100 Subject: [PATCH] build: link to GHA attestations examples Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com> --- content/build/attestations/sbom.md | 3 +++ content/build/attestations/slsa-provenance.md | 3 +++ 2 files changed, 6 insertions(+) diff --git a/content/build/attestations/sbom.md b/content/build/attestations/sbom.md index 3d6eaf3979..a5cf608183 100644 --- a/content/build/attestations/sbom.md +++ b/content/build/attestations/sbom.md @@ -37,6 +37,9 @@ $ docker buildx build --tag /: \ Alternatively, you can use the shorthand `--sbom=true` option instead of `--attest type=sbom`. +For an example on how to add SBOM attestations with GitHub Actions, see +[Add attestations with GitHub Actions](../ci/github-actions/attestations.md). + ## Verify SBOM attestations Always validate the generated SBOM for your image before you push your image to a registry. diff --git a/content/build/attestations/slsa-provenance.md b/content/build/attestations/slsa-provenance.md index 6cf110cb4b..a4410c3b53 100644 --- a/content/build/attestations/slsa-provenance.md +++ b/content/build/attestations/slsa-provenance.md @@ -33,6 +33,9 @@ $ docker buildx build --tag /: \ Alternatively, you can use the shorthand `--provenance=true` option instead of `--attest type=provenance`. To specify the `mode` parameter using the shorthand option, use: `--provenance=mode=max`. +For an example on how to add provenance attestations with GitHub Actions, see +[Add attestations with GitHub Actions](../ci/github-actions/attestations.md). + ## Mode You can use the `mode` parameter to define the level of detail to be included in