From 71bc6f9b9f1c96d56ec783051755a0cf19bf99a5 Mon Sep 17 00:00:00 2001
From: Kobi Hikri <kobi.hikri@gmail.com>
Date: Wed, 12 Aug 2026 01:04:39 +0300
Subject: [PATCH] ci: attach provenance and SBOM attestations to the published
 images (#2159)

* ci: attach provenance and SBOM attestations to the published images

* ci: restore trailing newline at end of file
---
 .github/workflows/docker-images.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/docker-images.yml b/.github/workflows/docker-images.yml
index 3c9d4549..bc7436e9 100644
--- a/.github/workflows/docker-images.yml
+++ b/.github/workflows/docker-images.yml
@@ -196,5 +196,7 @@ jobs:
           file: ${{ matrix.dockerfile }}
           platforms: ${{ matrix.platforms || 'linux/amd64,linux/arm64,linux/arm/v7' }}
           push: ${{ github.ref_type == 'tag' && secrets[matrix.password_secret] != '' }}
+          provenance: mode=max
+          sbom: true
           tags: ${{ steps.metadata.outputs.tags }}
           labels: ${{ steps.metadata.outputs.labels }}