From b050b464139da2a867fc428f3b0a4d69a975aa36 Mon Sep 17 00:00:00 2001 From: kevinlul <6320810+kevinlul@users.noreply.github.com> Date: Thu, 30 May 2024 20:39:54 -0400 Subject: [PATCH] Drop actions/attest-build-provenance for now but leave Docker SBOM --- .github/workflows/docker.yml | 7 ------- 1 file changed, 7 deletions(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 2b2519f3..29cd7046 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -50,7 +50,6 @@ jobs: username: ${{ github.repository_owner }} password: ${{ secrets.GITHUB_TOKEN }} - uses: docker/build-push-action@v5 - id: build-push with: push: ${{ github.event_name == 'push' }} tags: ${{ steps.meta.outputs.tags }} @@ -60,9 +59,3 @@ jobs: cache-from: type=local,src=/tmp/.buildx-cache cache-to: type=local,dest=/tmp/.buildx-cache,mode=max sbom: ${{ github.event_name == 'push' }} - - uses: actions/attest-build-provenance@v1 - if: ${{ github.event_name == 'push' }} - with: - subject-name: ${{ steps.meta.outputs.tags[0] }} - subject-digest: ${{ steps.build-push.outputs.digest }} - push-to-registry: true