Disable provenance in built images

williamdes · williamdes · commit 5c7b530c9a1e · 2023-02-24T11:42:57.000+01:00
Ref: docker/buildx#1509
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -44,11 +44,14 @@ jobs:
               run: make docker-build
               env:
                   DOCKER_BUILDKIT: 1
-                  BUILDKIT_MULTI_PLATFORM: 0
+                  BUILDKIT_MULTI_PLATFORM: "false"
                   PLATFORM: ${{ matrix.platform }}
                   IMAGE_TAG: "ghcr.io/sudo-bot/docker-rustpython/rustpython:${{ matrix.internal-tag }}-latest"
                   ACTION: push
-                  EXTRA_ARGS: "--cache-to=type=registry,ref=ghcr.io/sudo-bot/docker-rustpython/rustpython-buildcache:${{ matrix.internal-tag }},mode=max --cache-from=type=registry,ref=ghcr.io/sudo-bot/docker-rustpython/rustpython-buildcache:${{ matrix.internal-tag }}"
+                  # Disable provenance to remove the attestation from the pushed image
+                  # See: https://github.com/docker/buildx/issues/1509
+                  # It makes: ghcr.io/sudo-bot/docker-rustpython/rustpython:armv6-latest is a manifest list
+                  EXTRA_ARGS: "--provenance=false --cache-to=type=registry,ref=ghcr.io/sudo-bot/docker-rustpython/rustpython-buildcache:${{ matrix.internal-tag }},mode=max --cache-from=type=registry,ref=ghcr.io/sudo-bot/docker-rustpython/rustpython-buildcache:${{ matrix.internal-tag }}"
 
     create-final-image:
         runs-on: ubuntu-latest
