From f7e0830d4e6351703853bd128b05ab7fed41f3fb Mon Sep 17 00:00:00 2001 From: Yajith Dayarathna Date: Wed, 11 Sep 2024 11:46:36 +1200 Subject: [PATCH] enabling build attestation parameters for buildx --- build/build_and_push.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build/build_and_push.sh b/build/build_and_push.sh index 8076ac3..5546cdc 100755 --- a/build/build_and_push.sh +++ b/build/build_and_push.sh @@ -32,7 +32,7 @@ docker_image_build_and_push() build_args+=(--build-arg OSVERSION=1809) fi - docker buildx build --push -f ${dockerfile} "${build_args[@]}" --platform "${os}/${arch}" --tag "${repo}:${tag}-${os}-${arch}" . + docker buildx build --push -f ${dockerfile} "${build_args[@]}" --attest type=sbom,generator=docker/scout-sbom-indexer:latest --attest type=provenance,mode=max --platform "${os}/${arch}" --tag "${repo}:${tag}-${os}-${arch}" . } docker_manifest_create_and_push()