changelog | [dreamwidth/dreamwidth] ac3bc6: Disable Docker BuildKit provenance attestations in...

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: ac3bc65f616384cc864ba3fc33836ea2dac5cc1b https://github.com/dreamwidth/dreamwidth/commit/ac3bc65f616384cc864ba3fc33836ea2dac5cc1b Author: Mark Smith mark@dreamwidth.org Date: 2026-02-15 (Sun, 15 Feb 2026)

Changed paths: M .github/workflows/base-build.yml M .github/workflows/base22-build.yml M .github/workflows/devcontainer-build.yml M .github/workflows/proxy-build.yml M .github/workflows/web-build.yml M .github/workflows/web22-build.yml M .github/workflows/worker-build.yml M .github/workflows/worker22-build.yml

Log Message:

Disable Docker BuildKit provenance attestations in all build workflows

Docker 25+ enables provenance attestations by default, which creates 3 manifests per build in GHCR (image index + platform manifest + attestation). This clutters the package registry and makes dwtool's image selection UI show 3x entries per build. Since we build and deploy internally, provenance adds no value here.

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications