Enable SBOM generation for Docker images (#2547)

This PR attaches [SBOMs](https://docs.docker.com/build/ci/github-actions/attestations/#sbom) to all new images pushed to Docker Hub.
Kitware · Nov 6, 2024 · e9004f7 · e9004f7
1 parent 6da3b2f
commit e9004f7
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/.github/workflows/build-latest-images.yml b/.github/workflows/build-latest-images.yml
@@ -22,6 +22,7 @@ jobs:
           context: .
           platforms: linux/amd64,linux/arm64
           push: true
+          sbom: true
           tags: "kitware/cdash:latest"
           target: cdash
           cache-from: type=gha
@@ -42,6 +43,7 @@ jobs:
           context: .
           platforms: linux/amd64,linux/arm64
           push: true
+          sbom: true
           tags: "kitware/cdash:latest-ubi"
           target: cdash
           build-args: |
@@ -64,6 +66,7 @@ jobs:
           context: .
           platforms: linux/amd64,linux/arm64
           push: true
+          sbom: true
           tags: "kitware/cdash-worker:latest"
           target: cdash-worker
           cache-from: type=gha
@@ -84,6 +87,7 @@ jobs:
           context: .
           platforms: linux/amd64,linux/arm64
           push: true
+          sbom: true
           tags: "kitware/cdash-worker:latest-ubi"
           target: cdash-worker
           build-args: |
@@ -106,6 +110,7 @@ jobs:
           context: .
           platforms: linux/amd64,linux/arm64
           push: true
+          sbom: true
           tags: "kitware/cdash:testing"
           target: cdash
           build-args: |
@@ -128,6 +133,7 @@ jobs:
           context: .
           platforms: linux/amd64,linux/arm64
           push: true
+          sbom: true
           tags: "kitware/cdash:testing-ubi"
           target: cdash
           build-args: |

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -21,6 +21,7 @@ jobs:
           context: .
           platforms: linux/amd64,linux/arm64
           push: true
+          sbom: true
           tags: "kitware/cdash:${{ github.ref_name }}"
           target: cdash
           cache-from: type=gha
@@ -51,6 +52,7 @@ jobs:
           context: .
           platforms: linux/amd64,linux/arm64
           push: true
+          sbom: true
           tags: "kitware/cdash:${{ github.ref_name }}-ubi"
           target: cdash
           build-args: |