Drop actions/attest-build-provenance for now but leave Docker SBOM

DawnbrandBots · May 31, 2024 · b050b46 · b050b46
1 parent 9f043ce
commit b050b46
Showing 1 changed file with 0 additions and 7 deletions.
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -50,7 +50,6 @@ jobs:
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - uses: docker/build-push-action@v5
-        id: build-push
         with:
           push: ${{ github.event_name == 'push' }}
           tags: ${{ steps.meta.outputs.tags }}
@@ -60,9 +59,3 @@ jobs:
           cache-from: type=local,src=/tmp/.buildx-cache
           cache-to: type=local,dest=/tmp/.buildx-cache,mode=max
           sbom: ${{ github.event_name == 'push' }}
-      - uses: actions/attest-build-provenance@v1
-        if: ${{ github.event_name == 'push' }}
-        with:
-          subject-name: ${{ steps.meta.outputs.tags[0] }}
-          subject-digest: ${{ steps.build-push.outputs.digest }}
-          push-to-registry: true