test build apnd push to generate the atestation...

merlos · Aug 11, 2024 · 1410603 · 1410603
1 parent 36255b5
commit 1410603
Showing 1 changed file with 7 additions and 5 deletions.
diff --git a/.github/workflows/docker-release.yaml b/.github/workflows/docker-release.yaml
@@ -63,14 +63,16 @@ jobs:
         with:
           context: .
           push: true
+          sbom: true
+          provenance: mode=max
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           platforms: linux/amd64,linux/arm64,linux/arm/v7
 
      # - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v1
-        with:
-          subject-name: merlos/broken-links
-          subject-digest: ${{ steps.push.outputs.digest }}
-          push-to-registry: true
+     #   uses: actions/attest-build-provenance@v1
+     #   with:
+     #     subject-name: merlos/broken-links
+     #     subject-digest: ${{ steps.push.outputs.digest }}
+     #     push-to-registry: true