fix: use buildx with --provenance=false to avoid Zot manifest rejection

2026-07-12 16:36:02 +00:00
parent 16aadfa4ed
commit 06837d09d1
1 changed files with 11 additions and 7 deletions
@@ -33,19 +33,23 @@ jobs:
    steps:
      - uses: actions/checkout@v4

-      - name: Build image
-        run: |
-          docker build -t ${{ secrets.REGISTRY_URL }}/k8s-version-tracker:${{ github.sha }} \
-                       -t ${{ secrets.REGISTRY_URL }}/k8s-version-tracker:latest .
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3

-      - name: Push image
+      - name: Build and push image
        run: |
          if [ -n "${{ secrets.REGISTRY_USERNAME }}" ]; then
            echo "${{ secrets.REGISTRY_PASSWORD }}" | \
              docker login ${{ secrets.REGISTRY_URL }} -u ${{ secrets.REGISTRY_USERNAME }} --password-stdin
          fi
-          docker push ${{ secrets.REGISTRY_URL }}/k8s-version-tracker:${{ github.sha }}
-          docker push ${{ secrets.REGISTRY_URL }}/k8s-version-tracker:latest
+          docker buildx build \
+            --platform linux/amd64 \
+            --provenance=false \
+            --sbom=false \
+            --tag ${{ secrets.REGISTRY_URL }}/k8s-version-tracker:${{ github.sha }} \
+            --tag ${{ secrets.REGISTRY_URL }}/k8s-version-tracker:latest \
+            --push \
+            .

      - name: Notify Mattermost
        if: always()