search

the-draupnir-project / Draupnir

A Matrix moderation bot
https://the-draupnir-project.github.io/draupnir-documentation/
77 stars 14 forks source link

Add SBOM and Attestation to the Docker release process #477

Closed MTRNord closed 1 month ago

MTRNord commented 1 month ago

Also ensure we only deploy platforms on the qemu action as needed and update versions. (However, it is expected that it might install more than specified as it relies on prebuilt bundles)

This also limits the permissions used a bit.

See https://github.com/actions/attest-build-provenance for more info on the attestations. SBOM is probably self-explanatory.

Signed-off-by: MTRNord bold.wing5824@fastmail.com

Gnuxie commented 1 month ago

Thank you so much <3