From 6efcdfafa0ef8329d9e875ef144ef0682dceda7a Mon Sep 17 00:00:00 2001
From: islishude <islishude@gmail.com>
Date: Tue, 25 Jul 2023 23:48:43 +0800
Subject: [PATCH] ci: add attestations and multi-platforms to build step

---
 .github/workflows/docker-image.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
index 4b0536e..aa0ef25 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -48,6 +48,9 @@ jobs:
           labels: ${{ steps.docker-meta.outputs.labels }}
           cache-from: type=gha
           cache-to: type=gha,mode=max
+          sbom: true
+          provenance: true
+          platforms: linux/amd64,linux/arm64
       - name: Sign the published Docker image
         if: ${{ github.event_name != 'pull_request' }}
         env: