From 1bb2ac7d4cc819fb6d4cc2d4dde387d70870323c Mon Sep 17 00:00:00 2001
From: Patrick Stephens <pat@calyptia.com>
Date: Fri, 28 Jul 2023 11:16:40 +0100
Subject: [PATCH] workflows: disable provenance for legacy format images

Signed-off-by: Patrick Stephens <pat@calyptia.com>
---
 .github/workflows/build-legacy-branch.yaml          |  2 ++
 .github/workflows/call-integration-image-build.yaml |  2 ++
 .github/workflows/pr-compile-check.yaml             |  1 +
 .github/workflows/pr-image-tests.yaml               | 10 ++++++----
 4 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/build-legacy-branch.yaml b/.github/workflows/build-legacy-branch.yaml
index 163752ce1b8..df1832f0859 100644
--- a/.github/workflows/build-legacy-branch.yaml
+++ b/.github/workflows/build-legacy-branch.yaml
@@ -86,6 +86,7 @@ jobs:
           context: .
           tags: ${{ steps.debug-meta.outputs.tags }}
           labels: ${{ steps.debug-meta.outputs.labels }}
+          provenance: false
           platforms: linux/amd64
           push: true
           load: false
@@ -108,6 +109,7 @@ jobs:
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           platforms: linux/${{ matrix.arch }}
+          provenance: false
           push: true
           load: false
           build-args: |
diff --git a/.github/workflows/call-integration-image-build.yaml b/.github/workflows/call-integration-image-build.yaml
index f109b31d2dc..c312f1919df 100644
--- a/.github/workflows/call-integration-image-build.yaml
+++ b/.github/workflows/call-integration-image-build.yaml
@@ -70,6 +70,7 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           platforms: linux/amd64
           target: production
+          provenance: false
           push: true
           load: false
 
@@ -103,6 +104,7 @@ jobs:
           context: .
           tags: ${{ steps.meta-debug.outputs.tags }}
           labels: ${{ steps.meta-debug.outputs.labels }}
+          provenance: false
           target: debug
           platforms: linux/amd64
           push: true
diff --git a/.github/workflows/pr-compile-check.yaml b/.github/workflows/pr-compile-check.yaml
index b1b5dead0f3..b7ff250aef8 100644
--- a/.github/workflows/pr-compile-check.yaml
+++ b/.github/workflows/pr-compile-check.yaml
@@ -29,3 +29,4 @@ jobs:
         # No need to use after this so discard completely
         push: false
         load: false
+        provenance: false
diff --git a/.github/workflows/pr-image-tests.yaml b/.github/workflows/pr-image-tests.yaml
index b15f8e02cea..e3c869168fa 100644
--- a/.github/workflows/pr-image-tests.yaml
+++ b/.github/workflows/pr-image-tests.yaml
@@ -33,7 +33,7 @@ jobs:
             images: ${{ github.repository }}/pr-${{ github.event.pull_request.number }}
             tags: |
               type=sha
-    
+
         - name: Build the multi-arch images
           id: build
           uses: docker/build-push-action@v4
@@ -42,6 +42,7 @@ jobs:
             context: .
             platforms: linux/amd64
             target: production
+            provenance: false
             push: false
             load: true
             tags: ${{ steps.meta.outputs.tags }}
@@ -52,7 +53,7 @@ jobs:
           run: |
             docker run --rm -t ${{ steps.meta.outputs.tags }} --help
           shell: bash
-        
+
         - name: Build the debug multi-arch images
           uses: docker/build-push-action@v4
           with:
@@ -60,6 +61,7 @@ jobs:
             context: .
             platforms: linux/amd64
             target: debug
+            provenance: false
             push: false
             load: false
 
@@ -86,7 +88,7 @@ jobs:
       strategy:
         fail-fast: true
         matrix:
-          windows-base-version: 
+          windows-base-version:
             # https://github.com/fluent/fluent-bit/blob/1d366594a889624ec3003819fe18588aac3f17cd/dockerfiles/Dockerfile.windows#L3
             - '2019'
             - '2022'
@@ -105,7 +107,7 @@ jobs:
               type=sha
             flavor: |
               suffix=-windows-${{ matrix.windows-base-version }}
-    
+
         - name: Build the windows images
           id: build
           run: |