fix: Hub description update and more info to build output

Author: D3strukt0r

.github/workflows/ci.yml

@@ -66,8 +66,10 @@ jobs:
           file: src/Dockerfile
           platforms: linux/amd64,linux/arm64 # same as base image
           push: ${{ github.event_name != 'pull_request' && vars.DOCKERHUB_USERNAME != '' && env.dockerhub_token != '' }}
+          sbom: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+          annotations: ${{ steps.meta.outputs.annotations }}
           cache-from: type=gha
           cache-to: type=gha,mode=max
 

.github/workflows/dockerhub-description.yml

@@ -15,7 +15,7 @@ jobs:
     # https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#example-using-secrets
 
     env:
-      dockerhub_token: ${{ secrets.DOCKERHUB_TOKEN }}
+      dockerhub_user_token: ${{ secrets.DOCKERHUB_USER_TOKEN }}
 
     steps:
       - uses: actions/checkout@v5
@@ -26,10 +26,11 @@ jobs:
           echo "repository=$(echo "${{ vars.IMAGE_NAME }}" | tr '[A-Z]' '[a-z]')" >> $GITHUB_OUTPUT
 
       - uses: peter-evans/dockerhub-description@v5
-        if: ${{ !env.ACT && vars.DOCKERHUB_USERNAME != '' && env.dockerhub_token != '' }}
+        if: ${{ !env.ACT && vars.DOCKERHUB_USER_USERNAME != '' && env.dockerhub_user_token != '' }}
         with:
-          username: ${{ vars.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          username: ${{ vars.DOCKERHUB_USER_USERNAME }}
+          # OAT (Organisation Access Token) doesn't work yet, use PAT (Personal Access Token)
+          password: ${{ secrets.DOCKERHUB_USER_TOKEN }}
           repository: ${{ steps.prep.outputs.repository }}
           # Input exceeding 100 characters will be truncated.
           short-description: ${{ github.event.repository.description }}

src/Dockerfile

@@ -5,6 +5,7 @@ ARG VERDACCIO_VERSION=6
 
 # Docker multi-stage build - https://docs.docker.com/develop/develop-images/multistage-build/
 FROM node:24 AS builder
+#ARG BUILDKIT_SBOM_SCAN_STAGE=true
 
 # npm docs
 # --install-strategy https://docs.npmjs.com/cli/v11/commands/npm-install#install-strategy