add sbom, provenance and semver tag

Signed-off-by: Sylvain Hellegouarch <[email protected]>
chaostoolkit-incubator · Apr 19, 2024 · 02c228b · 02c228b
1 parent 7a7b99e
commit 02c228b
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -4,7 +4,6 @@ on:
   push:
     tags:
       - '[0-9]+.[0-9]+.[0-9]+'
-      - '[0-9]+.[0-9]+.[0-9]+rc[0-9]+'
 
 
 jobs:
@@ -29,7 +28,7 @@ jobs:
           chaostoolkit/k8scrd
         tags: |
           type=raw,value=latest
-          type=raw,value=${{steps.latest_tag.outputs.git_latest_tag}}
+          type=semver,pattern=${{steps.latest_tag.outputs.git_latest_tag}}
         labels: |
           org.opencontainers.image.version=${{steps.latest_tag.outputs.git_latest_tag}}
     - name: Build and push images
@@ -43,3 +42,5 @@ jobs:
         labels: ${{ steps.meta.outputs.labels }}
         cache-from: type=gha
         cache-to: type=gha,mode=max
+        provenance: mode=max
+        sbom: true
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,6 +8,7 @@
 ### Changed
 
 * Build the operator image for arm64 and amd64 now
+* Add sbom to operator image
 
 ## [0.11.1][] - 2024-04-19