ci: disable provenance for docker builds abd centralize renovate

dockhippie · Aug 6, 2023 · eee6a60 · eee6a60
1 parent b357c5f
commit eee6a60
Show file tree

Hide file tree

Showing 5 changed files with 14 additions and 16 deletions.
diff --git a/.github/renovate.json b/.github/renovate.json
@@ -1,21 +1,7 @@
 {
     "$schema": "https://docs.renovatebot.com/renovate-schema.json",
     "extends": [
-        "github>webhippie/renovate:docker",
-        "docker:pinDigests",
-        "default:automergeDigest"
+        "github>dockhippie/.github//renovate/preset"
     ],
-    "ignorePaths": [
-        "archive/"
-    ],
-    "docker": {
-        "digest": {
-            "groupName": "Docker digests",
-            "automerge": true
-        }
-    },
-    "packageRules": [],
-    "ignoreDeps": [
-        "docker/build-push-action"
-    ]
+    "packageRules": []
 }
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -78,6 +78,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: latest/
+          provenance: false
           file: latest/Dockerfile.amd64
           platforms: linux/amd64
           push: ${{ github.event_name != 'pull_request' }}
@@ -93,6 +94,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: latest/
+          provenance: false
           file: latest/Dockerfile.arm64
           platforms: linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
@@ -108,6 +110,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: latest/
+          provenance: false
           file: latest/Dockerfile.arm
           platforms: linux/arm/v6
           push: ${{ github.event_name != 'pull_request' }}

diff --git a/.github/workflows/v8.0.yml b/.github/workflows/v8.0.yml
@@ -78,6 +78,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v8.0/
+          provenance: false
           file: v8.0/Dockerfile.amd64
           platforms: linux/amd64
           push: ${{ github.event_name != 'pull_request' }}
@@ -93,6 +94,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v8.0/
+          provenance: false
           file: v8.0/Dockerfile.arm64
           platforms: linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
@@ -108,6 +110,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v8.0/
+          provenance: false
           file: v8.0/Dockerfile.arm
           platforms: linux/arm/v6
           push: ${{ github.event_name != 'pull_request' }}

diff --git a/.github/workflows/v8.1.yml b/.github/workflows/v8.1.yml
@@ -78,6 +78,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v8.1/
+          provenance: false
           file: v8.1/Dockerfile.amd64
           platforms: linux/amd64
           push: ${{ github.event_name != 'pull_request' }}
@@ -93,6 +94,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v8.1/
+          provenance: false
           file: v8.1/Dockerfile.arm64
           platforms: linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
@@ -108,6 +110,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v8.1/
+          provenance: false
           file: v8.1/Dockerfile.arm
           platforms: linux/arm/v6
           push: ${{ github.event_name != 'pull_request' }}

diff --git a/.github/workflows/v8.2.yml b/.github/workflows/v8.2.yml
@@ -78,6 +78,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v8.2/
+          provenance: false
           file: v8.2/Dockerfile.amd64
           platforms: linux/amd64
           push: ${{ github.event_name != 'pull_request' }}
@@ -93,6 +94,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v8.2/
+          provenance: false
           file: v8.2/Dockerfile.arm64
           platforms: linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
@@ -108,6 +110,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v8.2/
+          provenance: false
           file: v8.2/Dockerfile.arm
           platforms: linux/arm/v6
           push: ${{ github.event_name != 'pull_request' }}