From cf97eeb1fb2ab5c8c7ef385060aa06e2380cc870 Mon Sep 17 00:00:00 2001 From: Kobi Hikri Date: Wed, 29 Jul 2026 02:02:15 +0300 Subject: [PATCH 1/2] ci: attach provenance and SBOM attestations to the published image --- .github/workflows/oss-image.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/oss-image.yml b/.github/workflows/oss-image.yml index 0ddf8898..be30aafd 100644 --- a/.github/workflows/oss-image.yml +++ b/.github/workflows/oss-image.yml @@ -82,6 +82,8 @@ jobs: with: context: . push: true + provenance: mode=max + sbom: true tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} - platforms: linux/amd64,linux/arm64 + platforms: linux/amd64,linux/arm64 \ No newline at end of file From ac620248861785645d22250b8b33116d5d31d57d Mon Sep 17 00:00:00 2001 From: Kobi Hikri Date: Wed, 29 Jul 2026 02:25:55 +0300 Subject: [PATCH 2/2] ci: restore trailing newline at end of file --- .github/workflows/oss-image.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/oss-image.yml b/.github/workflows/oss-image.yml index be30aafd..0b03df0e 100644 --- a/.github/workflows/oss-image.yml +++ b/.github/workflows/oss-image.yml @@ -86,4 +86,4 @@ jobs: sbom: true tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} - platforms: linux/amd64,linux/arm64 \ No newline at end of file + platforms: linux/amd64,linux/arm64