enable sbom on GHA docker image build

Author: khakers

.github/workflows/docker-publish.yml

@@ -99,6 +99,7 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=gha
           cache-to: type=gha,mode=max
+          sbom: true
 
 
       # Sign the resulting Docker image digest except on PRs.