From 81c9d3e4e2b2a08466cce7cb33ef38b867d33c1b Mon Sep 17 00:00:00 2001
From: PoAn Yang <poan.yang@suse.com>
Date: Thu, 9 Jan 2025 17:50:49 +0800
Subject: [PATCH] feat: add provenance for harvester-cluster-repo (#898)

Signed-off-by: PoAn Yang <poan.yang@suse.com>
---
 .github/workflows/build.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6c9254692..bfe540e85 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -72,6 +72,8 @@ jobs:
         platforms: linux/${{ matrix.arch }}
         tags: rancher/harvester-cluster-repo:${{ env.branch }}-head-${{ matrix.arch }}
         file: dist/harvester-cluster-repo/Dockerfile
+        sbom: true
+        provenance: mode=max
 
     - name: Login to Google Cloud
       if: ${{ startsWith(github.ref, 'refs/heads/') }}