From 71e0debb23b6003d6119ed23335761c323e361bc Mon Sep 17 00:00:00 2001
From: mac641 <marcel.arndt1@icloud.com>
Date: Wed, 4 Jun 2025 12:56:47 +0200
Subject: [PATCH] ci: add generating sboms to docker workflow

---
 .github/workflows/docker.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index 34747e3..a577352 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -48,11 +48,15 @@ jobs:
         [ "${GITHUB_EVENT_NAME}" == 'release' ] && echo "tag=${GITHUB_REF##*/}" >> $GITHUB_ENV || true
         [ "${GITHUB_EVENT_NAME}" == 'push' ] && echo "tag=latest" >> $GITHUB_ENV || true
 
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
     - name: Build and push image
       uses: docker/build-push-action@v6
       with:
         context: .
         push: true
+        sbom: true
         tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.tag }}
 
   integration: