From fdfc9c5e6285ad3877c9a7ed087a92306e80895e Mon Sep 17 00:00:00 2001
From: Josh Komoroske <jdkomo@gmail.com>
Date: Wed, 7 Feb 2024 21:10:25 -0500
Subject: [PATCH] ci: prevent pushing unknown architecture image

---
 .github/workflows/build.yaml   | 3 ++-
 .github/workflows/release.yaml | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 812d588..3c300b7 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -38,9 +38,10 @@ jobs:
       - uses: docker/build-push-action@v5
         with:
           builder: ${{ steps.buildx.outputs.name }}
+          provenance: false
+          push: true
           tags: |
             ghcr.io/joshdk/actions-docker-shim:${{ github.sha }}
-          push: true
           build-args: |
             CREATED=${{ steps.args.outputs.created }}
             REVISION=${{ steps.args.outputs.revision }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 1638e7b..a5fe080 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -41,12 +41,13 @@ jobs:
       - uses: docker/build-push-action@v5
         with:
           builder: ${{ steps.buildx.outputs.name }}
+          provenance: false
+          push: true
           tags: |
             ghcr.io/joshdk/actions-docker-shim:latest
             ghcr.io/joshdk/actions-docker-shim:${{ github.ref_name }}
             ghcr.io/joshdk/actions-docker-shim:${{ steps.tags.outputs.minor }}
             ghcr.io/joshdk/actions-docker-shim:${{ steps.tags.outputs.major }}
-          push: true
           build-args: |
             CREATED=${{ steps.args.outputs.created }}
             REVISION=${{ steps.args.outputs.revision }}