From 9063e63b72b2cda3a4086009b6dee601ed311d9d Mon Sep 17 00:00:00 2001
From: PoAn Yang <poan.yang@suse.com>
Date: Tue, 17 Dec 2024 09:54:41 +0800
Subject: [PATCH] feat: add provenance for harvester-cluster-repo

Signed-off-by: PoAn Yang <poan.yang@suse.com>
---
 .github/workflows/build.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6c9254692..bfe540e85 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -72,6 +72,8 @@ jobs:
         platforms: linux/${{ matrix.arch }}
         tags: rancher/harvester-cluster-repo:${{ env.branch }}-head-${{ matrix.arch }}
         file: dist/harvester-cluster-repo/Dockerfile
+        sbom: true
+        provenance: mode=max
 
     - name: Login to Google Cloud
       if: ${{ startsWith(github.ref, 'refs/heads/') }}