From ec130a48859e353589f1255a1e4f8d8010d5396c Mon Sep 17 00:00:00 2001
From: Julian Pollinger <julian@pollinger.dev>
Date: Tue, 25 Mar 2025 01:17:04 +0100
Subject: [PATCH] Enable SBOM and provenance in build workflow

---
 .gitea/workflows/build.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 5efc343..6a977b0 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -51,6 +51,8 @@ jobs:
           file: ./Dockerfile
           target: ${{ matrix.flavor }}
           push: true
+          sbom: true
+          provenance: mode=max
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=registry,ref=harbor.pollinger.dev/build-cache/latex-build-container:${{ matrix.flavor }}