From 06837d09d178428096228a998c92f5084eb0521e Mon Sep 17 00:00:00 2001
From: claude-code <claude-code@themosers.club>
Date: Sun, 12 Jul 2026 16:36:02 +0000
Subject: [PATCH] fix: use buildx with --provenance=false to avoid Zot manifest
 rejection

---
 .gitea/workflows/ci-cd.yml | 18 +++++++++++-------
 1 file changed, 11 insertions(+), 7 deletions(-)

diff --git a/.gitea/workflows/ci-cd.yml b/.gitea/workflows/ci-cd.yml
index 5592f61..6302ec7 100644
--- a/.gitea/workflows/ci-cd.yml
+++ b/.gitea/workflows/ci-cd.yml
@@ -33,19 +33,23 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - name: Build image
-        run: |
-          docker build -t ${{ secrets.REGISTRY_URL }}/k8s-version-tracker:${{ github.sha }} \
-                       -t ${{ secrets.REGISTRY_URL }}/k8s-version-tracker:latest .
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
 
-      - name: Push image
+      - name: Build and push image
         run: |
           if [ -n "${{ secrets.REGISTRY_USERNAME }}" ]; then
             echo "${{ secrets.REGISTRY_PASSWORD }}" | \
               docker login ${{ secrets.REGISTRY_URL }} -u ${{ secrets.REGISTRY_USERNAME }} --password-stdin
           fi
-          docker push ${{ secrets.REGISTRY_URL }}/k8s-version-tracker:${{ github.sha }}
-          docker push ${{ secrets.REGISTRY_URL }}/k8s-version-tracker:latest
+          docker buildx build \
+            --platform linux/amd64 \
+            --provenance=false \
+            --sbom=false \
+            --tag ${{ secrets.REGISTRY_URL }}/k8s-version-tracker:${{ github.sha }} \
+            --tag ${{ secrets.REGISTRY_URL }}/k8s-version-tracker:latest \
+            --push \
+            .
 
       - name: Notify Mattermost
         if: always()