ci: disable provenance for docker builds abd centralize renovate

dockhippie · Aug 6, 2023 · 5016973 · 5016973
1 parent b58024b
commit 5016973
Show file tree

Hide file tree

Showing 7 changed files with 16 additions and 15 deletions.
diff --git a/.github/renovate.json b/.github/renovate.json
@@ -1,19 +1,8 @@
 {
     "$schema": "https://docs.renovatebot.com/renovate-schema.json",
     "extends": [
-        "github>webhippie/renovate:docker",
-        "docker:pinDigests",
-        "default:automergeDigest"
+        "github>dockhippie/.github//renovate/preset"
     ],
-    "ignorePaths": [
-        "archive/"
-    ],
-    "docker": {
-        "digest": {
-            "groupName": "Docker digests",
-            "automerge": true
-        }
-    },
     "packageRules": [
         {
             "description": "Update tags without merge",
@@ -44,8 +33,5 @@
                 "elastic/elasticsearch"
             ]
         }
-    ],
-    "ignoreDeps": [
-        "docker/build-push-action"
     ]
 }
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -78,6 +78,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: latest/
+          provenance: false
           file: latest/Dockerfile.amd64
           platforms: linux/amd64
           push: ${{ github.event_name != 'pull_request' }}
@@ -93,6 +94,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: latest/
+          provenance: false
           file: latest/Dockerfile.arm64
           platforms: linux/arm64
           push: ${{ github.event_name != 'pull_request' }}

diff --git a/.github/workflows/v5.6.yml b/.github/workflows/v5.6.yml
@@ -78,6 +78,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v5.6/
+          provenance: false
           file: v5.6/Dockerfile.amd64
           platforms: linux/amd64
           push: ${{ github.event_name != 'pull_request' }}
@@ -93,6 +94,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v5.6/
+          provenance: false
           file: v5.6/Dockerfile.arm64
           platforms: linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
@@ -108,6 +110,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v5.6/
+          provenance: false
           file: v5.6/Dockerfile.arm
           platforms: linux/arm/v6
           push: ${{ github.event_name != 'pull_request' }}

diff --git a/.github/workflows/v6.4.yml b/.github/workflows/v6.4.yml
@@ -78,6 +78,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v6.4/
+          provenance: false
           file: v6.4/Dockerfile.amd64
           platforms: linux/amd64
           push: ${{ github.event_name != 'pull_request' }}
@@ -93,6 +94,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v6.4/
+          provenance: false
           file: v6.4/Dockerfile.arm64
           platforms: linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
@@ -108,6 +110,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v6.4/
+          provenance: false
           file: v6.4/Dockerfile.arm
           platforms: linux/arm/v6
           push: ${{ github.event_name != 'pull_request' }}

diff --git a/.github/workflows/v6.8.yml b/.github/workflows/v6.8.yml
@@ -78,6 +78,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v6.8/
+          provenance: false
           file: v6.8/Dockerfile.amd64
           platforms: linux/amd64
           push: ${{ github.event_name != 'pull_request' }}
@@ -93,6 +94,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v6.8/
+          provenance: false
           file: v6.8/Dockerfile.arm64
           platforms: linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
@@ -108,6 +110,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v6.8/
+          provenance: false
           file: v6.8/Dockerfile.arm
           platforms: linux/arm/v6
           push: ${{ github.event_name != 'pull_request' }}

diff --git a/.github/workflows/v7.17.yml b/.github/workflows/v7.17.yml
@@ -78,6 +78,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v7.17/
+          provenance: false
           file: v7.17/Dockerfile.amd64
           platforms: linux/amd64
           push: ${{ github.event_name != 'pull_request' }}
@@ -93,6 +94,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v7.17/
+          provenance: false
           file: v7.17/Dockerfile.arm64
           platforms: linux/arm64
           push: ${{ github.event_name != 'pull_request' }}

diff --git a/.github/workflows/v8.3.yml b/.github/workflows/v8.3.yml
@@ -78,6 +78,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v8.3/
+          provenance: false
           file: v8.3/Dockerfile.amd64
           platforms: linux/amd64
           push: ${{ github.event_name != 'pull_request' }}
@@ -93,6 +94,7 @@ jobs:
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: v8.3/
+          provenance: false
           file: v8.3/Dockerfile.arm64
           platforms: linux/arm64
           push: ${{ github.event_name != 'pull_request' }}