docker-build-docs-attested.sh

#!/bin/bash

# Exit on error
set -e

# Ensure version is passed
if [[ -z "$1" ]]; then
  echo "Usage: $0 <version>"
  echo "Example: $0 x.y.z"
  exit 1
fi

VERSION="$1"
BUILDER="buildkit-container"

# Create builder if it doesn't exist
if ! docker buildx inspect "$BUILDER" >/dev/null 2>&1; then
  echo "Creating BuildKit builder: $BUILDER"
  docker buildx create --name "$BUILDER" --driver docker-container --use
  docker buildx inspect --bootstrap
else
  docker buildx use "$BUILDER"
fi

echo "pulling latest version of nginx:alpine"
docker pull nginx:alpine

echo "Building and Pushing Docker image with SBOM and provenance for version: $VERSION"

docker buildx build \
  --platform=linux/amd64 \
  -f HtmlDocs/Dockerfile \
  -t stariongroup/sysml2.net.docs:latest \
  -t stariongroup/sysml2.net.docs:$VERSION \
  --sbom=true \
  --provenance=true \
  --push \
  .

echo "Build complete."
echo "Tags: latest, $VERSION"
echo "Provenance attached as image metadata"