Add provenance steps for release (#3083)

* Add provenance steps for release * Update release workflow * Fix branch filters * Cleanup release code * Fix attestation steps * Add SBOM and disable image provenance * Disable image provenance * fix sbom install * Add sboms to goreleaser * Update SLSA version to v2.0.0 --------- Signed-off-by: Sanket Sudake <sanketsudake@gmail.com>
2024-12-09 00:41:24 +05:30
parent 7058130c3b
commit 38779b9318
5 changed files with 121 additions and 9 deletions
@@ -354,3 +354,5 @@ docker_signs:
    - '--key=cosign.key'
    - '${artifact}'
    - '--yes' # needed for cosign 2.0.0+
+sboms:
+  - artifacts: archive