From 257787ce153416b5dbe1b3c2e4e40843e3ee0750 Mon Sep 17 00:00:00 2001
From: Kobi Hikri <kobi.hikri@gmail.com>
Date: Wed, 29 Jul 2026 04:51:19 +0300
Subject: [PATCH] feat(ci): attach provenance and SBOM attestations to the
 published image (#3415)

---
 .github/workflows/ci.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1e93758d..2297b68f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -241,3 +241,5 @@ jobs:
             VERSION=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.version'] }}
           tags: ${{ steps.meta.outputs.tags }}
           push: true
+          provenance: mode=max
+          sbom: true