docker / build-push-action

GitHub Action to build and push Docker images with Buildx
https://github.com/marketplace/actions/build-and-push-docker-images
Apache License 2.0
4.36k stars 558 forks source link

Disable provenance by default if not set #781

Closed crazy-max closed 1 year ago

crazy-max commented 1 year ago

related to https://github.com/docker/buildx/issues/1533

fixes #780 fixes #778 fixes #771

If provenance not specified but Buildx version compatible for attestation, disable provenance anyway. While the action successfully pushes OCI compliant images to well-known registries, some runtimes (e.g. Google Cloud Run and AWS Lambda) are not able to pull resulting image from their own registry.

When merged we are going to create a v3.3.1 patch release. In follow-up we will create a v4.0.0 release that keeps provenance enabled, just like v3.3.0.