From 365ce67f21c1400cd28e629716364c97a5063522 Mon Sep 17 00:00:00 2001
From: Muhammad Atif Ali <atif@coder.com>
Date: Thu, 14 Nov 2024 19:16:33 -0800
Subject: [PATCH] chore: add provenance attestation to docker-base image
 (#14999)

Enables [build
attestation](https://docs.docker.com/build/metadata/attestations/slsa-provenance/)
for the docker-base image.
Contributes to #14879 and coder/internal#89

As an experiment, we are only doing it with the coder-base image for
now.
---
 .github/workflows/docker-base.yaml | 1 +
 .github/workflows/release.yaml     | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/workflows/docker-base.yaml b/.github/workflows/docker-base.yaml
index c0a3e87c5f..a8eb573b55 100644
--- a/.github/workflows/docker-base.yaml
+++ b/.github/workflows/docker-base.yaml
@@ -66,6 +66,7 @@ jobs:
           context: base-build-context
           file: scripts/Dockerfile.base
           platforms: linux/amd64,linux/arm64,linux/arm/v7
+          provenance: true
           pull: true
           no-cache: true
           push: ${{ github.event_name != 'pull_request' }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index cf4fb87cd0..92898ebe54 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -263,6 +263,7 @@ jobs:
           context: base-build-context
           file: scripts/Dockerfile.base
           platforms: linux/amd64,linux/arm64,linux/arm/v7
+          provenance: true
           pull: true
           no-cache: true
           push: true