Add provenance information to bake build steps

This commit is contained in:
danilapog
2025-08-04 13:47:08 +03:00
parent 0671c29443
commit 38946cb641
2 changed files with 4 additions and 4 deletions

View File

@ -155,7 +155,7 @@ jobs:
### ==>> Build and push images at this step ### ### ==>> Build and push images at this step ###
docker buildx bake --sbom=true -f docker-bake.hcl "${IMAGE}" --push docker buildx bake --sbom=true --provenance=mode=max -f docker-bake.hcl "${IMAGE}" --push
echo "DONE: Build success" echo "DONE: Build success"
### Set output for Zap scanner ### Set output for Zap scanner

View File

@ -64,7 +64,7 @@ jobs:
export TAG=${VERSION%.*}.${RELEASE_NUMBER} export TAG=${VERSION%.*}.${RELEASE_NUMBER}
export SHORTER_TAG=${VERSION%.*} export SHORTER_TAG=${VERSION%.*}
export SHORTEST_TAG=${VERSION%.*.*} export SHORTEST_TAG=${VERSION%.*.*}
docker buildx bake --sbom=true -f docker-bake.hcl "${TARGET}" --push docker buildx bake --sbom=true --provenance=mode=max -f docker-bake.hcl "${TARGET}" --push
echo "DONE: Build success >> exit with 0" echo "DONE: Build success >> exit with 0"
exit 0 exit 0
shell: bash shell: bash
@ -110,7 +110,7 @@ jobs:
set -eux set -eux
export PULL_TAG=${VERSION%.*}.${RELEASE_NUMBER} export PULL_TAG=${VERSION%.*}.${RELEASE_NUMBER}
export TAG=${VERSION%.*}.${RELEASE_NUMBER} export TAG=${VERSION%.*}.${RELEASE_NUMBER}
docker buildx bake --sbom=true -f docker-bake.hcl "${TARGET}" --push docker buildx bake --sbom=true --provenance=mode=max -f docker-bake.hcl "${TARGET}" --push
shell: bash shell: bash
build-ucs-ubuntu20: build-ucs-ubuntu20:
@ -148,5 +148,5 @@ jobs:
export PACKAGE_SUFFIX= export PACKAGE_SUFFIX=
export TAG=${VERSION%.*}.${RELEASE_NUMBER} export TAG=${VERSION%.*}.${RELEASE_NUMBER}
export PACKAGE_VERSION=$( echo ${VERSION} | sed -E 's/(.*)\./\1-/') export PACKAGE_VERSION=$( echo ${VERSION} | sed -E 's/(.*)\./\1-/')
docker buildx bake --sbom=true -f docker-bake.hcl documentserver-ucs --push docker buildx bake --sbom=true --provenance=mode=max -f docker-bake.hcl documentserver-ucs --push
shell: bash shell: bash