adding Supply Chain Attestations

fontebasso · Dec 28, 2024 · f75eb92 · f75eb92
1 parent ea2ac82
commit f75eb92
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/docker-image-release.yml b/.github/workflows/docker-image-release.yml
@@ -37,6 +37,8 @@ jobs:
             fontebasso/php-nginx:${{ env.RELEASE_VERSION }}-amd64
           platforms: linux/amd64
           push: true
+          attestations: |
+            type=provenance,mode=max
 
       - name: Build for arm64
         uses: docker/build-push-action@v6
@@ -46,6 +48,8 @@ jobs:
             fontebasso/php-nginx:${{ env.RELEASE_VERSION }}-arm64
           platforms: linux/arm64
           push: true
+          attestations: |
+            type=provenance,mode=max
 
       - name: Merge and push multi-arch
         run: |