This is an automated email from the ASF dual-hosted git repository.
terrymanu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/shardingsphere.git
The following commit(s) were added to refs/heads/master by this push:
new e954434769a ci: attach provenance and SBOM attestations to the
published MCP image (#39263)
e954434769a is described below
commit e954434769a2192dee2b5df64d6e7ef44902f3e5
Author: Kobi Hikri <[email protected]>
AuthorDate: Thu Jul 30 14:58:36 2026 +0300
ci: attach provenance and SBOM attestations to the published MCP image
(#39263)
* ci: attach provenance and SBOM attestations to the published MCP image
* ci: restore trailing newline at end of file
---
.github/workflows/release-mcp.yml | 2 ++
1 file changed, 2 insertions(+)
diff --git a/.github/workflows/release-mcp.yml
b/.github/workflows/release-mcp.yml
index 656cd51f295..257c5ee1d15 100644
--- a/.github/workflows/release-mcp.yml
+++ b/.github/workflows/release-mcp.yml
@@ -129,6 +129,8 @@ jobs:
context: distribution/mcp/target
file: distribution/mcp/Dockerfile
push: true
+ provenance: mode=max
+ sbom: true
platforms: linux/amd64,linux/arm64
tags: ${{ steps.release-version.outputs.tags }}
build-args: |
