ci: attach provenance and SBOM attestations to the published images (#3048)

* ci: attach provenance and SBOM attestations to the published images

* ci: restore trailing newline at end of file
This commit is contained in:
Kobi Hikri
2026-08-01 15:11:55 +03:00
committed by GitHub
parent 0bb41ebe96
commit 6618240c61
+8
View File
@@ -216,6 +216,8 @@ jobs:
context: . context: .
file: ./docker/Dockerfile file: ./docker/Dockerfile
push: true push: true
provenance: mode=max
sbom: true
tags: ${{ steps.meta.outputs.tags }} tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }} labels: ${{ steps.meta.outputs.labels }}
cache-from: type=registry,ref=whyour/qinglong:cache-alpine cache-from: type=registry,ref=whyour/qinglong:cache-alpine
@@ -295,6 +297,8 @@ jobs:
context: . context: .
file: ./docker/Dockerfile.debian file: ./docker/Dockerfile.debian
push: true push: true
provenance: mode=max
sbom: true
tags: ${{ steps.meta.outputs.tags }} tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }} labels: ${{ steps.meta.outputs.labels }}
cache-from: type=registry,ref=whyour/qinglong:cache-debian cache-from: type=registry,ref=whyour/qinglong:cache-debian
@@ -359,6 +363,8 @@ jobs:
context: . context: .
file: ./docker/Dockerfile.310 file: ./docker/Dockerfile.310
push: true push: true
provenance: mode=max
sbom: true
tags: | tags: |
whyour/qinglong:python3.10 whyour/qinglong:python3.10
whyour/qinglong:${{ steps.version.outputs.version }}-python3.10 whyour/qinglong:${{ steps.version.outputs.version }}-python3.10
@@ -425,6 +431,8 @@ jobs:
context: . context: .
file: ./docker/Dockerfile.debian310 file: ./docker/Dockerfile.debian310
push: true push: true
provenance: mode=max
sbom: true
tags: | tags: |
whyour/qinglong:debian-python3.10 whyour/qinglong:debian-python3.10
whyour/qinglong:${{ steps.version.outputs.version }}-debian-python3.10 whyour/qinglong:${{ steps.version.outputs.version }}-debian-python3.10