feat: add provenance for harvester-cluster-repo

Signed-off-by: PoAn Yang <[email protected]>
harvester · Dec 17, 2024 · 9063e63 · 9063e63
1 parent 8ff5515
commit 9063e63
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -72,6 +72,8 @@ jobs:
         platforms: linux/${{ matrix.arch }}
         tags: rancher/harvester-cluster-repo:${{ env.branch }}-head-${{ matrix.arch }}
         file: dist/harvester-cluster-repo/Dockerfile
+        sbom: true
+        provenance: mode=max
 
     - name: Login to Google Cloud
       if: ${{ startsWith(github.ref, 'refs/heads/') }}