From 37a2630f770ef91cdc6fce15e169b4ced22d1ed3 Mon Sep 17 00:00:00 2001 From: Frederic Cabassut Date: Fri, 20 Mar 2026 20:24:23 +0100 Subject: [PATCH] fix: remove unknown/unknown platform entries from Docker manifests Add provenance: false to docker/build-push-action to prevent BuildKit from generating SLSA attestation entries that appear as unknown/unknown in the image manifest. Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/workflows/bump.yml | 1 + .github/workflows/release.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/bump.yml b/.github/workflows/bump.yml index 9d0a3b1..f7dc86e 100644 --- a/.github/workflows/bump.yml +++ b/.github/workflows/bump.yml @@ -91,6 +91,7 @@ jobs: push: true tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} + provenance: false cache-from: type=gha cache-to: type=gha,mode=max diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 59db770..e153d5b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -51,6 +51,7 @@ jobs: push: true tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} + provenance: false cache-from: type=gha cache-to: type=gha,mode=max