adds-provenance

Author: danschmidt5189

.github/workflows/build.yml

@@ -50,9 +50,9 @@ jobs:
           labels: ${{ steps.build-meta.outputs.labels }}
           outputs: type=docker,dest=${{ runner.temp }}/${{ env.IMAGE_ARTIFACT_NAME }}
           # platforms: linux/amd64,linux/arm64
-          # provenance: true
+          provenance: true
           push: false
-          sbom: true
+          # sbom: true # docker exporter does not support manifest lists
           tags: ${{ steps.build-meta.outputs.tags }}
 
       - name: Upload untested image as an artifact