set provenance and sbom data

advian-oss · Oct 16, 2024 · 12f4940 · 12f4940
1 parent ecfbcc2
commit 12f4940
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -46,8 +46,8 @@ jobs:
 
       - name: Bake pyenv
         run: |
-          docker buildx bake --pull --load --push --file ./pyenv.hcl
+          docker buildx bake --pull --load --provenance=true --sbom=true --push --file ./pyenv.hcl
 
       - name: Bake tox
         run: |
-          docker buildx bake --pull --load --push --file ./tox-base.hcl
+          docker buildx bake --pull --load --provenance=true --sbom=true --push --file ./tox-base.hcl
diff --git a/README.md b/README.md
@@ -58,7 +58,7 @@ available on the host:
     ./create_builds.py pyenv > pyenv.hcl
     ./create_builds.py tox-base > tox-base.hcl
     docker login
-    docker buildx bake --pull --load --push --file ./pyenv.hcl
-    docker buildx bake --pull --load --push --file ./tox-base.hcl
+    docker buildx bake --pull --load --push --file ./pyenv.hcl  --provenance=true --sbom=true
+    docker buildx bake --pull --load --push --file ./tox-base.hcl --provenance=true --sbom=true
 
 The `create_builds.py` script output includes the Docker commands above as HCL file comments.