From badefc86cd57296d533db19108e44ae0394e6ffe Mon Sep 17 00:00:00 2001
From: Yang Chiu <yang.chiu@suse.com>
Date: Tue, 25 Jun 2024 09:11:03 +0800
Subject: [PATCH] ci: build and publish image with sbom attestation

Signed-off-by: Yang Chiu <yang.chiu@suse.com>
---
 .github/workflows/build.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9505589f..fe9371e3 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -80,6 +80,7 @@ jobs:
         platforms: linux/amd64,linux/arm64
         tags: longhornio/longhorn-share-manager:${{ env.branch }}-head
         file: package/Dockerfile
+        sbom: true
 
     - name: docker-publish-with-tag
       if: ${{ startsWith(github.ref, 'refs/tags/') }}
@@ -90,3 +91,4 @@ jobs:
         platforms: linux/amd64,linux/arm64
         tags: longhornio/longhorn-share-manager:${{ github.ref_name }}
         file: package/Dockerfile
+        sbom: true