Expand parameters for container image building - Githubissues

ossf / package-feeds

Feed parsing for language package manager updates

Apache License 2.0

71 stars 24 forks source link

Expand parameters for container image building #426

Closed JAORMX closed 6 months ago

JAORMX commented 7 months ago

This adds the following:

Expanded container metadata for the built image.
multi-architecture builds
Docker SBOM generation
Provenance information generation

The intention is to keep a similar set of tags generated as before.

this also separates the pre-existing docker workflow into two jobs:

One that builds the image on each PR
Another one intended for the release.

This ensures that we get test coverage for image builds while keeping the GitHub actions permissions minimal.