Add provenance information to bake build steps

This commit is contained in:
danilapog
2025-08-04 13:47:08 +03:00
parent 0671c29443
commit 38946cb641
2 changed files with 4 additions and 4 deletions

View File

@ -155,7 +155,7 @@ jobs:
### ==>> Build and push images at this step ###
docker buildx bake --sbom=true -f docker-bake.hcl "${IMAGE}" --push
docker buildx bake --sbom=true --provenance=mode=max -f docker-bake.hcl "${IMAGE}" --push
echo "DONE: Build success"
### Set output for Zap scanner

View File

@ -64,7 +64,7 @@ jobs:
export TAG=${VERSION%.*}.${RELEASE_NUMBER}
export SHORTER_TAG=${VERSION%.*}
export SHORTEST_TAG=${VERSION%.*.*}
docker buildx bake --sbom=true -f docker-bake.hcl "${TARGET}" --push
docker buildx bake --sbom=true --provenance=mode=max -f docker-bake.hcl "${TARGET}" --push
echo "DONE: Build success >> exit with 0"
exit 0
shell: bash
@ -110,7 +110,7 @@ jobs:
set -eux
export PULL_TAG=${VERSION%.*}.${RELEASE_NUMBER}
export TAG=${VERSION%.*}.${RELEASE_NUMBER}
docker buildx bake --sbom=true -f docker-bake.hcl "${TARGET}" --push
docker buildx bake --sbom=true --provenance=mode=max -f docker-bake.hcl "${TARGET}" --push
shell: bash
build-ucs-ubuntu20:
@ -148,5 +148,5 @@ jobs:
export PACKAGE_SUFFIX=
export TAG=${VERSION%.*}.${RELEASE_NUMBER}
export PACKAGE_VERSION=$( echo ${VERSION} | sed -E 's/(.*)\./\1-/')
docker buildx bake --sbom=true -f docker-bake.hcl documentserver-ucs --push
docker buildx bake --sbom=true --provenance=mode=max -f docker-bake.hcl documentserver-ucs --push
shell: bash