ci: build and publish image with sbom attestation

Signed-off-by: Yang Chiu <yang.chiu@suse.com>
longhorn · Jun 25, 2024 · f3e2427 · f3e2427
1 parent 6b9dfdf
commit f3e2427
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -101,6 +101,7 @@ jobs:
         platforms: linux/amd64
         tags: longhornio/longhorn-instance-manager:${{ env.branch }}-head-amd64
         file: package/Dockerfile
+        sbom: true
         build-args: |
           ARCH=amd64
     - name: docker-publish-longhorn-instance-manager-with-tag
@@ -112,6 +113,7 @@ jobs:
         platforms: linux/amd64
         tags: longhornio/longhorn-instance-manager:${{ github.ref_name }}-amd64
         file: package/Dockerfile
+        sbom: true
         build-args: |
           ARCH=amd64
 
@@ -162,6 +164,7 @@ jobs:
         platforms: linux/arm64
         tags: longhornio/longhorn-instance-manager:${{ env.branch }}-head-arm64
         file: package/Dockerfile
+        sbom: true
         build-args: |
           ARCH=arm64
     - name: docker-publish-longhorn-instance-manager-with-tag
@@ -173,6 +176,7 @@ jobs:
         platforms: linux/arm64
         tags: longhornio/longhorn-instance-manager:${{ github.ref_name }}-arm64
         file: package/Dockerfile
+        sbom: true
         build-args: |
           ARCH=arm64