feat: add provenance for SLSA3

Signed-off-by: Raphanus Lo <[email protected]>
longhorn · Jan 13, 2025 · 979cc1a · 979cc1a
1 parent 8086a61
commit 979cc1a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -81,6 +81,7 @@ jobs:
         tags: longhornio/backing-image-manager:${{ env.branch }}-head
         file: package/Dockerfile
         sbom: true
+        provenance: mode=max
 
     - name: docker-publish-with-tag
       if: ${{ startsWith(github.ref, 'refs/tags/') }}
@@ -92,3 +93,4 @@ jobs:
         tags: longhornio/backing-image-manager:${{ github.ref_name }}
         file: package/Dockerfile
         sbom: true
+        provenance: mode=max