Merge pull request #6254 from crazy-max/hack-slsa-v1

tonistiigi · web-flow · commit 399c615e50b7 · 2025-10-13T08:38:44.000-07:00
hack: enable SLSA provenance v1 for buildkit and frontend images
diff --git a/hack/util b/hack/util
@@ -32,7 +32,7 @@ buildAttestFlags() {
     if [ "$GITHUB_ACTIONS" = "true" ]; then
       prvattrs="$prvattrs,builder-id=https://github.com/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}"
     fi
-    echo "--attest=type=sbom --attest=type=provenance,$prvattrs"
+    echo "--attest=type=sbom --attest=type=provenance,version=v1,$prvattrs"
   fi
 }
 

Original file line number	Diff line number	Diff line change
`@@ -32,7 +32,7 @@ buildAttestFlags() {`
`32`	`32`	`if [ "$GITHUB_ACTIONS" = "true" ]; then`
`33`	`33`	`prvattrs="$prvattrs,builder-id=https://github.com/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}"`
`34`	`34`	`fi`
`35`		`- echo "--attest=type=sbom --attest=type=provenance,$prvattrs"`
	`35`	`+ echo "--attest=type=sbom --attest=type=provenance,version=v1,$prvattrs"`
`36`	`36`	`fi`
`37`	`37`	`}`
`38`	`38`