ci: build and publish image with sbom attestation

Signed-off-by: Yang Chiu <[email protected]>
nirvati · Jun 25, 2024 · 91d724a · 91d724a
1 parent 83cd31c
commit 91d724a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -80,6 +80,7 @@ jobs:
         platforms: linux/amd64,linux/arm64
         tags: longhornio/longhorn-manager:${{ env.branch }}-head
         file: package/Dockerfile
+        sbom: true
 
     - name: docker-publish-with-tag
       if: ${{ startsWith(github.ref, 'refs/tags/') }}
@@ -90,3 +91,4 @@ jobs:
         platforms: linux/amd64,linux/arm64
         tags: longhornio/longhorn-manager:${{ github.ref_name }}
         file: package/Dockerfile
+        sbom: true