From 9047c5aaa9323b7a911b6310bcda3689208e3ca0 Mon Sep 17 00:00:00 2001
From: Zach Auten <zachauten@gmail.com>
Date: Tue, 24 Sep 2024 01:01:02 -0400
Subject: [PATCH] enable sbom on bake action

---
 .github/workflows/build.yaml | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 1e76033..386c2ee 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -24,11 +24,12 @@ jobs:
           files: |
             ./docker-bake.hcl
             ${{ steps.meta.outputs.bake-file }}
+          sbom: true
           push: true
 
-      - uses: actions/attest-build-provenance@v1
-        with:
-          subject-name: {{ env.IMAGE }}
-          subject-digest: ${{ steps.push.outputs.digest }}
-          push-to-registry: true
+      # - uses: actions/attest-build-provenance@v1
+      #   with:
+      #     subject-name: {{ env.IMAGE }}
+      #     subject-digest: ${{ steps.push.outputs.digest }}
+      #     push-to-registry: true