From 98fd29e66d9b9caf2227ce29de3415afe4f57441 Mon Sep 17 00:00:00 2001
From: Ruslan Bakiev <572431+veikab@users.noreply.github.com>
Date: Sun, 21 Jun 2026 16:41:12 +0700
Subject: [PATCH] Disable Docker provenance attestations

---
 .gitea/workflows/build-and-deploy.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitea/workflows/build-and-deploy.yml b/.gitea/workflows/build-and-deploy.yml
index baddea8..228eb43 100644
--- a/.gitea/workflows/build-and-deploy.yml
+++ b/.gitea/workflows/build-and-deploy.yml
@@ -23,7 +23,7 @@ jobs:
         run: |
           set -euo pipefail
           for attempt in 1 2 3; do
-            if docker build --tag "$IMAGE_SHA" --tag "$IMAGE_LATEST" . &&
+            if docker build --provenance=false --tag "$IMAGE_SHA" --tag "$IMAGE_LATEST" . &&
               docker push "$IMAGE_SHA" &&
               docker push "$IMAGE_LATEST"; then
               docker image rm -f "$IMAGE_SHA" "$IMAGE_LATEST"