ci: build and publish image with sbom attestation

Signed-off-by: Yang Chiu <yang.chiu@suse.com>
longhorn · Jun 25, 2024 · badefc8 · badefc8
1 parent c1eab29
commit badefc8
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -80,6 +80,7 @@ jobs:
         platforms: linux/amd64,linux/arm64
         tags: longhornio/longhorn-share-manager:${{ env.branch }}-head
         file: package/Dockerfile
+        sbom: true
 
     - name: docker-publish-with-tag
       if: ${{ startsWith(github.ref, 'refs/tags/') }}
@@ -90,3 +91,4 @@ jobs:
         platforms: linux/amd64,linux/arm64
         tags: longhornio/longhorn-share-manager:${{ github.ref_name }}
         file: package/Dockerfile
+        sbom: true