#Is it possible to supply build attestations to a docker image

1 messages · Page 1 of 1 (latest)

gray helm
#

There is additional metadata that can be provided to a Docker image. Namely, build attestations: https://docs.docker.com/build/metadata/attestations/

Something like

docker buildx build --sbom=true --provenance=true .

Is it possible to add this kind of metadata to an image using Dagger?

Docker Documentation

Introduction to SBOM and provenance attestations with Docker Build, what they are, and why they exist

worldly ridge
gray helm
#

Thanks! Looks like the issue hasn't seen movement in a few months. Is this planned for the near future or still a bit off from being revisited?

worldly ridge