From 48a4728edd31d87b1cf2c803cc9a41036b6d5914 Mon Sep 17 00:00:00 2001
From: danellecline <dcline@mbari.org>
Date: Wed, 29 Jan 2025 17:40:25 -0800
Subject: [PATCH] build: added provenance and SBOM to docker build  - now have
 an A rating in docker hub :)

---
 justfile | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/justfile b/justfile
index 3f783c3..1076c20 100644
--- a/justfile
+++ b/justfile
@@ -8,6 +8,15 @@ set dotenv-filename := x'${ENV_FILE:-.env}'
 list:
     @just --list --unsorted
 
+# Build the docker images for linux/amd64 and linux/arm64 and push to Docker Hub
+build-and-push:
+    #!/usr/bin/env bash
+    echo "Building and pushing the Docker image"
+    RELEASE_VERSION=$(git describe --tags --abbrev=0)
+    docker buildx create --name mybuilder --platform linux/amd64,linux/arm64 --use
+    docker buildx build --sbom=true --provenance=true --push --platform linux/amd64,linux/arm64 -t mbari/fastapi-tator:$RELEASE_VERSION --build-arg IMAGE_URI=mbari/fastapi-tator:$RELEASE_VERSION -f Dockerfile .
+
+# Setup the development environment
 setup-dev:
     #!/usr/bin/env bash
     export PATH=$CONDA_PREFIX/bin:$PATH
@@ -15,6 +24,7 @@ setup-dev:
     echo "Creating a conda environment"
     conda env create
 
+# Run the FastAPI server for development
 run-dev:
     #!/usr/bin/env bash
     export PATH=$CONDA_PREFIX/bin:$PATH