build: Enable SBOM and SLSA Provenance

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2023-01-27 16:45:41 +02:00 · 2023-01-27 16:45:41 +02:00 · 59e061c8ef
parent 83a40d156b
commit 59e061c8ef
1 changed files with 2 additions and 0 deletions
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@ -62,6 +62,8 @@ jobs:
      - name: Publish images
        uses: docker/build-push-action@v3
        with:
+          sbom: true
+          provenance: true
          push: true
          builder: ${{ steps.buildx.outputs.name }}
          context: .