scan stages

jippi · Mar 16, 2024 · e2a7893 · e2a7893
1 parent 2a1576e
commit e2a7893
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -1,7 +1,6 @@
 #syntax=docker/dockerfile:1
 
 ARG UBUNTU_RELEASE
-ARG BUILDKIT_SBOM_SCAN_STAGE=true
 ARG BUILDKIT_SBOM_SCAN_CONTEXT=true
 
 #############################################
@@ -10,6 +9,8 @@ ARG BUILDKIT_SBOM_SCAN_CONTEXT=true
 
 FROM ubuntu:$UBUNTU_RELEASE AS base-layer
 
+ARG BUILDKIT_SBOM_SCAN_STAGE=true
+
 COPY --chown=root:root ["docker-install-base.sh", "/root"]
 
 RUN --mount=id=pritunl-apt-lists,target=/var/lib/apt,type=cache \
@@ -24,6 +25,8 @@ RUN --mount=id=pritunl-apt-lists,target=/var/lib/apt,type=cache \
 
 FROM base-layer AS monogodb-layer
 
+ARG BUILDKIT_SBOM_SCAN_STAGE=true
+
 COPY --chown=root:root ["docker-install-mongo.sh", "/root"]
 
 ARG MONGODB_VERSION
@@ -41,6 +44,7 @@ RUN --mount=id=pritunl-apt-lists,target=/var/lib/apt,type=cache \
 
 FROM monogodb-layer
 
+ARG BUILDKIT_SBOM_SCAN_STAGE=true
 ARG PRITUNL_VERSION
 ENV PRITUNL_VERSION=${PRITUNL_VERSION}