From 926c52ffc6cc53cf67f4095945d664621b04d9ef Mon Sep 17 00:00:00 2001
From: Asankhaya Sharma <codelion@users.noreply.github.com>
Date: Sat, 23 Aug 2025 08:45:47 +0800
Subject: [PATCH] Disable provenance in Docker publish workflows

Set 'provenance: false' in all Docker publish GitHub Actions workflows for both amd64 and arm64 images. This change disables provenance generation during image builds.
---
 .github/workflows/publish-docker-full-amd64.yml  | 1 +
 .github/workflows/publish-docker-full-arm64.yml  | 1 +
 .github/workflows/publish-docker-proxy-amd64.yml | 1 +
 .github/workflows/publish-docker-proxy-arm64.yml | 1 +
 4 files changed, 4 insertions(+)

diff --git a/.github/workflows/publish-docker-full-amd64.yml b/.github/workflows/publish-docker-full-amd64.yml
index f929e9a0..bcabf18f 100644
--- a/.github/workflows/publish-docker-full-amd64.yml
+++ b/.github/workflows/publish-docker-full-amd64.yml
@@ -34,6 +34,7 @@ jobs:
           file: Dockerfile
           push: true
           platforms: linux/amd64
+          provenance: false
           tags: |
             ghcr.io/${{ github.repository }}:${{ steps.version.outputs.VERSION }}-amd64
             ghcr.io/${{ github.repository }}:latest-amd64
diff --git a/.github/workflows/publish-docker-full-arm64.yml b/.github/workflows/publish-docker-full-arm64.yml
index b8db6f5f..db098467 100644
--- a/.github/workflows/publish-docker-full-arm64.yml
+++ b/.github/workflows/publish-docker-full-arm64.yml
@@ -37,6 +37,7 @@ jobs:
           file: Dockerfile
           push: true
           platforms: linux/arm64
+          provenance: false
           tags: |
             ghcr.io/${{ github.repository }}:${{ steps.version.outputs.VERSION }}-arm64
             ghcr.io/${{ github.repository }}:latest-arm64
diff --git a/.github/workflows/publish-docker-proxy-amd64.yml b/.github/workflows/publish-docker-proxy-amd64.yml
index 82357726..26efe60b 100644
--- a/.github/workflows/publish-docker-proxy-amd64.yml
+++ b/.github/workflows/publish-docker-proxy-amd64.yml
@@ -34,6 +34,7 @@ jobs:
           file: Dockerfile.proxy_only
           push: true
           platforms: linux/amd64
+          provenance: false
           tags: |
             ghcr.io/${{ github.repository }}:${{ steps.version.outputs.VERSION }}-proxy-amd64
             ghcr.io/${{ github.repository }}:latest-proxy-amd64
diff --git a/.github/workflows/publish-docker-proxy-arm64.yml b/.github/workflows/publish-docker-proxy-arm64.yml
index a31cf247..c75dc886 100644
--- a/.github/workflows/publish-docker-proxy-arm64.yml
+++ b/.github/workflows/publish-docker-proxy-arm64.yml
@@ -37,6 +37,7 @@ jobs:
           file: Dockerfile.proxy_only
           push: true
           platforms: linux/arm64
+          provenance: false
           tags: |
             ghcr.io/${{ github.repository }}:${{ steps.version.outputs.VERSION }}-proxy-arm64
             ghcr.io/${{ github.repository }}:latest-proxy-arm64