update build.yaml to add sbom, attestation

.github/workflows/build.yaml

@@ -27,10 +27,12 @@ jobs:
         with:
           images: ${{ env.IMAGE }}
 
-      - uses: docker/bake-action@v5
-        id: bake
+      - name: Build and push image
+        id: build
+        uses: docker/build-push-action@v6
         with:
-          files: |
-            ./docker-bake.hcl
-            ${{ steps.meta.outputs.bake-file }}
+          sbom: true
+          provenance: mode=max
           push: true
+          tags: ${{ steps.meta.outputs.tags }}
+

docker-bake.hcl

@@ -4,4 +4,13 @@ target "default" {
   inherits = ["docker-metadata-action"]
   context = "."
   dockerfile = "Dockerfile"
-}
+  attest = [
+    {
+      type = "provenance"
+      mode = "max"
+    },
+    {
+      type = "sbom"
+    }
+  ]
+}

src/db/src/main/java/boilerplate/db/repository/PersonRepository.java

@@ -2,6 +2,8 @@
 
 import boilerplate.db.entities.Person;
 import java.util.List;
+
+import org.springframework.data.jdbc.repository.query.Query;
 import org.springframework.data.repository.CrudRepository;
 import org.springframework.lang.NonNull;
 import org.springframework.stereotype.Repository;