Try adding attestations (again)

ksclarke · Oct 28, 2024 · 7194aa5 · 7194aa5
1 parent 6bc6dd4
commit 7194aa5
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -65,4 +65,5 @@ jobs:
           DOCKER_ACCOUNT: ${{ secrets.DOCKER_ACCOUNT }}
           DOCKER_BUILDKIT: 1
         run: |
-          mvn -B -ntp deploy -Prelease -Drevision="${{ env.RELEASE_VERSION }}" -DskipNexusStagingDeployMojo="true"
+          mvn -B -ntp deploy -Prelease -Drevision="${{ env.RELEASE_VERSION }}" -DskipNexusStagingDeployMojo="true" \
+            -Ddocker.sbom=true -Ddocker.provenance=max
diff --git a/pom.xml b/pom.xml
@@ -70,7 +70,7 @@
     <docker.image.name>${docker.namespace}${project.artifactId}:${revision}</docker.image.name>
 
     <!-- Configuration for Docker attestations -->
-    <docker.attestations>false</docker.attestations>
+    <docker.sbom>false</docker.sbom>
     <docker.provenance>false</docker.provenance>
   </properties>
 
@@ -260,7 +260,7 @@
                   <!-- Multi-arch builds don't work on GA because containerd isn't supported (cf. reason number two on
                   https://github.com/fabric8io/docker-maven-plugin/issues/1557#issuecomment-1325203489) -->
                   <attestations>
-                    <sbom>${docker.attestations}</sbom><!-- true -->
+                    <sbom>${docker.sbom}</sbom><!-- true -->
                     <provenance>${docker.provenance}</provenance> <!-- max -->
                   </attestations>
                   <!-- -->