medium10 pts · first answer countsdevsecopssupply-chainsbom

Attaching provenance and SBOM at build

You build images with Docker Buildx in CI and want each image to carry a record of how it was built and what it contains. What do you add?

A.--provenance=true and --sbom=true on docker buildx buildB.A LABEL with the developer's name and emailC.A README file copied into the image root folderD.The --squash flag to merge all the image layers

Discussion 0

Join free to post in the discussion.

Attaching provenance and SBOM at build

Discussion 0

Related questions