feat(ci): add provenance for SLSA3

Signed-off-by: Raphanus Lo <yunchang.lo@suse.com>
longhorn · Jan 13, 2025 · da8a899 · da8a899
1 parent 767566a
commit da8a899
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -116,6 +116,7 @@ jobs:
         tags: longhornio/longhorn-engine:${{ env.branch }}-head-amd64
         file: package/Dockerfile
         sbom: true
+        provenance: mode=max
         build-args: |
           ARCH=amd64
     - name: docker-build-longhorn-engine-with-tag
@@ -139,6 +140,7 @@ jobs:
         tags: longhornio/longhorn-engine:${{ github.ref_name }}-amd64
         file: package/Dockerfile
         sbom: true
+        provenance: mode=max
         build-args: |
           ARCH=amd64
 
@@ -207,6 +209,7 @@ jobs:
         tags: longhornio/longhorn-engine:${{ env.branch }}-head-arm64
         file: package/Dockerfile
         sbom: true
+        provenance: mode=max
         build-args: |
           ARCH=arm64
     - name: docker-build-longhorn-engine-with-tag
@@ -230,6 +233,7 @@ jobs:
         tags: longhornio/longhorn-engine:${{ github.ref_name }}-arm64
         file: package/Dockerfile
         sbom: true
+        provenance: mode=max
         build-args: |
           ARCH=arm64