From 47ae62381bb90e71bee137e6e37e6ceee9d87727 Mon Sep 17 00:00:00 2001 From: Bruno Willenborg Date: Fri, 15 Nov 2024 09:37:53 +0100 Subject: [PATCH] Disable provenance attestation --- .github/workflows/docker-build-push-edge.yml | 4 +++- .github/workflows/docker-build-push-release.yml | 6 ++++-- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.github/workflows/docker-build-push-edge.yml b/.github/workflows/docker-build-push-edge.yml index 6257f90..4525fd9 100644 --- a/.github/workflows/docker-build-push-edge.yml +++ b/.github/workflows/docker-build-push-edge.yml @@ -21,7 +21,7 @@ jobs: run: | echo "OWNER_LC=${OWNER,,}" >>${GITHUB_ENV} env: - OWNER: '${{ github.repository_owner }}' + OWNER: "${{ github.repository_owner }}" - name: Checkout repo uses: actions/checkout@v4 - name: Docker login Dockerhub @@ -79,5 +79,7 @@ jobs: build-args: | CITYDB_TOOL_VERSION=${{ steps.short-sha.outputs.sha }} annotations: ${{ steps.meta.outputs.annotations }} + provenance: false + sbom: false - name: Image digest run: echo ${{ steps.docker_build.outputs.digest }} diff --git a/.github/workflows/docker-build-push-release.yml b/.github/workflows/docker-build-push-release.yml index 9a437df..1c5a909 100644 --- a/.github/workflows/docker-build-push-release.yml +++ b/.github/workflows/docker-build-push-release.yml @@ -3,7 +3,7 @@ name: docker-build-push-release on: workflow_dispatch: release: - types: [ published, edited ] + types: [published, edited] env: IMAGE_NAME: citydb-tool PLATFORMS: linux/amd64,linux/arm64 @@ -20,7 +20,7 @@ jobs: run: | echo "OWNER_LC=${OWNER,,}" >>${GITHUB_ENV} env: - OWNER: '${{ github.repository_owner }}' + OWNER: "${{ github.repository_owner }}" - name: Checkout repo uses: actions/checkout@v4 - name: Docker login Dockerhub @@ -78,5 +78,7 @@ jobs: build-args: | CITYDB_TOOL_VERSION=${{ steps.release_version.outputs.version }} annotations: ${{ steps.meta.outputs.annotations }} + provenance: false + sbom: false - name: Image digest run: echo ${{ steps.docker_build.outputs.digest }}