Pass docker buildx flags provenance & sbom

[renegrob]

I want a proper SBOM and attestation for my Quarkus container.
Is there a way to pass docker buildx flags --provenance=mode=max --sbom=true to the buildx process from the Quarkus? Should I run docker buildx outside of the Quarkus tasks?

[cescoffier]

Good question, are you using the docker image builder? (just to be sure).

I think we should add this option.