From 2ae95253d9779bcf60deb23a48dedf8d73ccd7c9 Mon Sep 17 00:00:00 2001
From: Kobi Hikri <kobi.hikri@gmail.com>
Date: Wed, 29 Jul 2026 06:31:43 +0300
Subject: [PATCH] chore(ci): attach provenance and SBOM attestations to the
 released image (#2149)

---
 .github/workflows/release-docker.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/release-docker.yaml b/.github/workflows/release-docker.yaml
index 18518f491..0f0708817 100644
--- a/.github/workflows/release-docker.yaml
+++ b/.github/workflows/release-docker.yaml
@@ -51,5 +51,7 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
           push: true
+          provenance: mode=max
+          sbom: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}