From f849c791b6d209b92b4ede8369e9babe7655249e Mon Sep 17 00:00:00 2001 From: shiva kumar Date: Thu, 20 Jun 2024 11:05:49 +0530 Subject: [PATCH] Exclude attestation manifests (sbom, provenance) during the build using buildx as some tools Signed-off-by: shiva kumar --- deployments/container/multi-arch.mk | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/deployments/container/multi-arch.mk b/deployments/container/multi-arch.mk index 4f199ed..48a42e7 100644 --- a/deployments/container/multi-arch.mk +++ b/deployments/container/multi-arch.mk @@ -13,7 +13,8 @@ # limitations under the License. PUSH_ON_BUILD ?= false -DOCKER_BUILD_OPTIONS = --output=type=image,push=$(PUSH_ON_BUILD) +ATTACH_ATTESTATIONS ?= false +DOCKER_BUILD_OPTIONS = --output=type=image,push=$(PUSH_ON_BUILD) --provenance=$(ATTACH_ATTESTATIONS) --sbom=$(ATTACH_ATTESTATIONS) DOCKER_BUILD_PLATFORM_OPTIONS = --platform=linux/amd64,linux/arm64 REGCTL ?= regctl