ci: add generating sboms to docker workflow (#26)

Author: mac641

.github/workflows/docker.yaml

@@ -56,9 +56,14 @@ jobs:
         with:
           args: --build-tags client -p bugs -p unused --timeout=3m
 
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
       - name: Build and push image
         uses: docker/build-push-action@v6
         with:
           context: .
           push: true
-          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ (env.BRANCH_NAME == 'main' && 'latest') || env.BRANCH_NAME }}
+          sbom: true
+          tags: >
+            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ (env.BRANCH_NAME == 'main' && 'latest') || env.BRANCH_NAME }}