Merge branch 'main' into renovate/pin-dependencies

Author: andreaskienle

.github/workflows/clean-main-images.yml

@@ -2,7 +2,7 @@ name: Cleanup main images
 
 on:
   schedule:
-    - cron: "5 * * * *"
+    - cron: '5 1 * * *'
   workflow_dispatch:
 
 env:
@@ -12,7 +12,7 @@ env:
 
 jobs:
   clean:
-    name: "Clean main images"
+    name: 'Clean main images'
     runs-on: ubuntu-latest
     permissions:
       packages: write
@@ -21,7 +21,7 @@ jobs:
         uses: actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55 # v5
         with:
           package-name: ${{ env.IMAGE_NAME }}
-          package-type: "container"
+          package-type: 'container'
           min-versions-to-keep: ${{ env.KEEP_X_IMAGES }}
           # Ignore any version that does NOT start with 'main-'
-          ignore-versions: "^(?!main-).*$"
+          ignore-versions: '^(?!main-).*$'

.github/workflows/on-release.yaml

@@ -24,18 +24,18 @@ jobs:
 
   release:
     runs-on: ubuntu-latest
-    needs: 
+    needs:
       - run-build
 
     permissions:
       contents: write # write release tag to the repo
       packages: write # push the container to ghcr
-  
+
     steps:
       - name: Checkout code
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
-          fetch-depth: 0  # Fetch all history for all tags and branches
+          fetch-depth: 0 # Fetch all history for all tags and branches
 
       - name: Check if tag already exists
         id: check_tag
@@ -47,7 +47,7 @@ jobs:
           else
             echo "Tag does not exit. Building release version ${{ github.event.inputs.nextVersion }}"
           fi
-      
+
       - name: Log in to the Container registry
         uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
@@ -61,7 +61,9 @@ jobs:
         with:
           context: .
           push: true
-          tags:  ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.event.inputs.nextVersion }}
+          sbom: true
+          provenance: mode=max
+          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest,${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.event.inputs.nextVersion }}
 
       - name: Create Release with autogenerated release notes
         env: