Skip to content

Commit 23bf0c7

Browse files
committed
build: enhance Docker build process with SBOM support
- Updated the Docker build commands in build_updated.sh to include SBOM (Software Bill of Materials) and provenance flags for improved tracking and compliance. - This change aligns with the project's ongoing transition to Bun and enhances the build process for better security and transparency.
1 parent fdcc3aa commit 23bf0c7

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

build_updated.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -142,11 +142,11 @@ for bun_version in "${BUN_VERSIONS[@]}"; do
142142

143143
for tag in "${tags[@]}"; do
144144
log "Tagging $image_name as $tag"
145-
retry docker buildx build --platform "$PLATFORMS" -t "$image_name" -t "$tag" "./src/base/${node_major}/${distro}" --push --provenance=mode=max
145+
retry docker buildx build --sbom=true --provenance=true --platform "$PLATFORMS" -t "$image_name" -t "$tag" "./src/base/${node_major}/${distro}" --push --provenance=mode=max
146146

147147
if [ "$distro" == "alpine" ]; then
148148
log "Building and Tagging Alpine image with Git"
149-
retry docker buildx build --platform "$PLATFORMS" -t "$image_name-git" -t "$tag-git" "./src/git/${node_major}/${distro}" --push --provenance=mode=max
149+
retry docker buildx build --sbom=true --provenance=true --platform "$PLATFORMS" -t "$image_name-git" -t "$tag-git" "./src/git/${node_major}/${distro}" --push --provenance=mode=max
150150
fi
151151
done
152152

0 commit comments

Comments
 (0)