From 536a64d0646e971d273cd14a1fe600e6cb8ad0a7 Mon Sep 17 00:00:00 2001
From: Justin Plock <jplock@amazon.com>
Date: Fri, 20 Dec 2024 16:47:52 -0500
Subject: [PATCH] WIP

---
 .github/workflows/docker-bake.yml |  3 +++
 .github/workflows/rust.yml        |  1 +
 docker-bake.hcl                   | 12 ++++++++++++
 3 files changed, 16 insertions(+)

diff --git a/.github/workflows/docker-bake.yml b/.github/workflows/docker-bake.yml
index c06cea8..dbc7f1f 100644
--- a/.github/workflows/docker-bake.yml
+++ b/.github/workflows/docker-bake.yml
@@ -4,9 +4,11 @@ on:
   push:
     branches:
       - main
+      - jp-bake
   pull_request:
     branches:
       - main
+      - jp-bake
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref_name }}
@@ -15,6 +17,7 @@ concurrency:
 env:
   RUST_BACKTRACE: 1
   CARGO_TERM_COLOR: never
+  NO_COLOR: 1
 
 jobs:
   docker:
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index ae89faf..e8473d7 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -15,6 +15,7 @@ concurrency:
 env:
   RUST_BACKTRACE: 1
   CARGO_TERM_COLOR: never
+  NO_COLOR: 1
 
 jobs:
   test:
diff --git a/docker-bake.hcl b/docker-bake.hcl
index 6529499..8f2f29f 100644
--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@@ -8,7 +8,13 @@ target "parent" {
     args = {
         TARGETPLATFORM = "x86_64-unknown-linux-gnu"
     }
+    attest = [
+        "type=provenance,mode=max",
+        "type=sbom",
+    ]
+    platforms = ["linux/amd64"]
     tags = ["parent-vault:latest"]
+    output = ["type=cacheonly"]
     cache-to = ["type=gha,ignore-error=true,mode=max,scope=parent"]
     cache-from = ["type=gha,scope=parent"]
 }
@@ -19,7 +25,13 @@ target "enclave" {
     args = {
         TARGETPLATFORM = "x86_64-unknown-linux-musl"
     }
+    attest = [
+        "type=provenance,mode=max",
+        "type=sbom",
+    ]
+    platforms = ["linux/amd64"]
     tags = ["enclave-vault:latest"]
+    output = ["type=cacheonly"]
     cache-to = ["type=gha,ignore-error=true,mode=max,scope=enclave"]
     cache-from = ["type=gha,scope=enclave"]
 }
\ No newline at end of file