From fd6c5b33ba626bb142577c3c70d497a604e4de51 Mon Sep 17 00:00:00 2001
From: Meredith Lancaster <malancas@github.com>
Date: Tue, 4 Jun 2024 10:28:25 -0600
Subject: [PATCH] add missing steps

Signed-off-by: Meredith Lancaster <malancas@github.com>
---
 .github/workflows/ghcr-publish.yml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ghcr-publish.yml b/.github/workflows/ghcr-publish.yml
index d23974e..0fa8a36 100644
--- a/.github/workflows/ghcr-publish.yml
+++ b/.github/workflows/ghcr-publish.yml
@@ -25,6 +25,12 @@ jobs:
           COPY artifact.bin .
           EOF
 
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0
+
       - name: Login to GHCR
         uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
         with:
@@ -39,8 +45,6 @@ jobs:
           context: .
           platforms: 'linux/amd64,linux/arm64'
           push: true
-          sbom: true
-          provenance: true
           tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
 
       - name: Attest artifact