From cd02b2de92aef81c21b8c9a0a9b694409278e27a Mon Sep 17 00:00:00 2001 From: Kobi Hikri Date: Thu, 6 Aug 2026 05:03:08 +0300 Subject: [PATCH] ci: attach provenance and SBOM attestations to the published image (#902) * ci: attach provenance and SBOM attestations to the published image * ci: restore trailing newline at end of file --- .github/workflows/docker-build.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml index 59d90b6..66ac4e7 100644 --- a/.github/workflows/docker-build.yml +++ b/.github/workflows/docker-build.yml @@ -58,6 +58,8 @@ jobs: with: context: . push: ${{ github.event_name != 'pull_request' }} + provenance: mode=max + sbom: true tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} cache-from: type=gha @@ -89,4 +91,3 @@ jobs: docker pull ghcr.io/${REPO_LOWER}:latest docker tag ghcr.io/${REPO_LOWER}:latest ${{ secrets.AWS_ACCOUNT_ID }}.dkr.ecr.ap-northeast-1.amazonaws.com/next-ai-draw-io:latest docker push ${{ secrets.AWS_ACCOUNT_ID }}.dkr.ecr.ap-northeast-1.amazonaws.com/next-ai-draw-io:latest -