Possibility to override buildkit-syft-scanner

[guwenqing]

Hi, guys

We have enabled sbom feature, and it will pull from this image.
docker/buildkit-syft-scanner:pull token for registry-1.docker.io

Is there any way to override to a different image from our mirror due to dockerhub throtting ?

Thank you!

(We are not considering change the docker daemon config yet to point to a mirror)

[crazy-max]

Yes you can override the default scanner image (also called generator): https://docs.docker.com/build/metadata/attestations/sbom/#sbom-generator

With build-push-action:

      -
        name: Build and push
        uses: docker/build-push-action@v6
        with:
          push: true
          tags: user/app:latest
          attest: |
            type=sbom,generator=<image>

or

      -
        name: Build and push
        uses: docker/build-push-action@v6
        with:
          push: true
          tags: user/app:latest
          sbom: generator=<image>

[guwenqing]

Yes I am about to come back, this works for me.
sbom: generator=mirror.gcr.io/docker/buildkit-syft-scanner:stable-1

I am using this particular.