Thomas Kosiewski f48a24c18e feat: add SBOM generation and attestation to GitHub workflow (#17277) ...

Move SBOM generation and attestation to GitHub workflow

This PR moves the SBOM generation and attestation process from the `build_docker.sh` script to the GitHub workflow. The change:

1. Removes SBOM generation and attestation from the `build_docker.sh` script
2. Adds a new "SBOM Generation and Attestation" step in the GitHub workflow
3. Generates and attests SBOMs for both multi-arch images and latest tags when applicable

This approach ensures SBOM generation happens once for the final multi-architecture image rather than for each architecture separately.

Change-Id: I2e15d7322ddec933bbc9bd7880abba9b0842719f
Signed-off-by: Thomas Kosiewski <tk@coder.com>

2025-04-07 17:54:05 +02:00

..

apidocgen

chore: force babel dependency to 7.26.10 (#17193)

2025-04-01 22:05:23 -04:00

apitypings

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

auditdocgen

chore: adopt markdownlint and markdown-table-formatter for *.md (#15831)

2025-01-03 13:12:59 +00:00

audittypegen

…

clidocgen

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

dbgen

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

echoserver

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

embedded-pg

chore: run macOS, windows, and race tests with Postgres in CI (#15520)

2024-12-03 13:33:17 +01:00

examplegen

chore: use tabs for prettier and biome (#14283)

2024-08-15 14:53:53 -06:00

gensite

chore: add icons.json file (#10085)

2023-10-06 13:46:37 -06:00

ironbank

…

linux-pkg

chore: update docs links (#14221)

2024-08-17 11:51:13 +00:00

metricsdocgen

docs: restructure docs (#14421)

2024-10-05 10:52:04 -05:00

migrate-ci

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

migrate-test

fix: correct spurious edits made during the lint fixing slog (#17113)

2025-03-27 01:13:21 -05:00

release

chore(docs): move feature stage docs to install directory (#17199)

2025-04-01 18:44:51 -05:00

releasemigrations

chore: adopt markdownlint and markdown-table-formatter for *.md (#15831)

2025-01-03 13:12:59 +00:00

testidp

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

typegen

chore: deprecate ResourceSystem (#17217)

2025-04-02 19:17:26 +04:00

win-installer

…

archive.sh

…

build_docker_multiarch.sh

…

build_docker.sh

feat: add SBOM generation and attestation to GitHub workflow (#17277)

2025-04-07 17:54:05 +02:00

build_go.sh

feat: include winres metadata in Windows binaries (#16706)

2025-02-28 16:03:08 +11:00

build_windows_installer.sh

chore: sign the windows installer (#14353)

2024-08-19 20:33:37 -04:00

check_codersdk_imports.sh

chore: add lint for codersdk dependencies (#14638)

2024-09-12 15:34:03 +10:00

check_enterprise_imports.sh

chore(scripts/rules.go): broaden scope of testingWithOwnerUser linter (#10548)

2023-11-08 14:54:48 +00:00

check_go_versions.sh

ci: check go versions are consistent (#17149)

2025-04-01 09:03:54 +01:00

check_site_icons.sh

fix: return error if agent init script fails to download valid binary (#13280)

2024-05-30 13:33:00 +02:00

check_unstaged.sh

fix(scripts/check_unstaged.sh): add argument separator in git diff command (#17122)

2025-03-27 08:57:12 +00:00

coder-dev.sh

fix(scripts/coder-dev.sh): silence output if stdout is not a TTY (#16131)

2025-01-14 14:34:23 +00:00

deploy-pr.sh

chore(scripts): auto authenticate gh CLI in scripts on dogfood (#13107)

2024-04-30 19:36:12 +03:00

dev-oidc.sh

feat(cli/server.go): allow the use of public OIDC clients (#16489)

2025-02-07 14:06:38 +01:00

develop.sh

chore: ensure coder is logged before querying orgs (#15618)

2024-11-21 16:04:21 +01:00

Dockerfile

…

Dockerfile.base

chore: update Terraform to 1.11.3 (#17256)

2025-04-04 10:31:45 -04:00

helm.sh

chore(site): regenerate provisioner stub (#9151)

2023-08-18 10:50:43 +02:00

image_tag.sh

ci: build a multi-arch image on each commit to main (#11544)

2024-01-18 10:57:35 +00:00

lib.sh

fix(scripts): allow docs_update_experiments.sh to be run on macOS (#14658)

2024-09-12 21:28:07 +00:00

list_dependencies.sh

chore: add lint for codersdk dependencies (#14638)

2024-09-12 15:34:03 +10:00

notarize_darwin.sh

…

package.sh

Revert "chore: fix build ci (#13164)" (#13180)

2024-05-06 13:13:24 +00:00

pnpm_install.sh

chore: only run pnpm when node_modules are out of date in Makefile (#16017)

2025-01-03 18:37:25 +05:00

release_promote_stable.sh

chore(scripts): fix stable release promote script (#13204)

2024-05-17 08:25:10 +00:00

release.sh

chore(scripts): remove branch checks from release script (#14184)

2024-08-06 14:54:26 +00:00

remote_playwright.sh

chore(site): update @playwright/test to version 1.47.2 (#14912)

2024-10-01 13:59:49 +00:00

rules.go

fix: add agent exec abstraction (#15717)

2024-12-04 23:30:25 +02:00

sign_darwin.sh

chore: embed Info.plist in dylib (#15907)

2024-12-18 11:08:33 +00:00

sign_windows.sh

feat: sign windows binaries (#13086)

2024-04-29 10:43:27 -05:00

update-flake.sh

chore(dogfood): include multiple templates under dogfood/ (#16846)

2025-03-11 13:17:40 +00:00

version.sh

fix: fix shallow clones not retrieving a valid semver (#13609)

2024-06-22 00:02:12 +10:00