feat: add provenance for harvester-cluster-repo (#898)

Signed-off-by: PoAn Yang <[email protected]>
harvester · Jan 9, 2025 · 81c9d3e · 81c9d3e
1 parent e3c1626
commit 81c9d3e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -72,6 +72,8 @@ jobs:
         platforms: linux/${{ matrix.arch }}
         tags: rancher/harvester-cluster-repo:${{ env.branch }}-head-${{ matrix.arch }}
         file: dist/harvester-cluster-repo/Dockerfile
+        sbom: true
+        provenance: mode=max
 
     - name: Login to Google Cloud
       if: ${{ startsWith(github.ref, 'refs/heads/') }}