svrnty/docker-base-distro
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 13 Wiki Activity

Switch provenance from mode=max to mode=min to reduce image size
Some checks failed
Weekly Rebuild (CVE Updates) / rebuild (apko/flutter-sdk.yaml, flutter-sdk) (push) Waiting to run
Details
Check for Upstream Stable Updates / Rebuild and push all variants (apko/build.yaml, build) (push) Blocked by required conditions
Details
Check for Upstream Stable Updates / Rebuild and push all variants (apko/dotnet-runtime.yaml, dotnet-runtime) (push) Blocked by required conditions
Details
Check for Upstream Stable Updates / Rebuild and push all variants (apko/dotnet-sdk.yaml, dotnet-sdk) (push) Blocked by required conditions
Details
Check for Upstream Stable Updates / Rebuild and push all variants (apko/flutter-sdk.yaml, flutter-sdk) (push) Blocked by required conditions
Details
Check for Upstream Stable Updates / Check Wolfi package updates (push) Waiting to run
Details
Check for Upstream Stable Updates / Check .NET stable releases (push) Waiting to run
Details
Check for Upstream Stable Updates / Check Flutter stable releases (push) Waiting to run
Details
Check for Upstream Stable Updates / Rebuild and push all variants (apko/base.yaml, base) (push) Blocked by required conditions
Details
Check for Upstream Stable Updates / Create release for new Flutter version (push) Blocked by required conditions
Details
Build and Push Base Distro Images / build-and-push (apko/base.yaml, base) (push) Successful in 39s
Details
Build and Push Base Distro Images / build-and-push (apko/build.yaml, build) (push) Successful in 59s
Details
Build and Push Base Distro Images / build-and-push (apko/dotnet-runtime.yaml, dotnet-runtime) (push) Successful in 51s
Details
Build and Push Base Distro Images / build-and-push (apko/flutter-sdk.yaml, flutter-sdk) (push) Failing after 4s
Details
Build and Push Base Distro Images / build-and-push (apko/dotnet-sdk.yaml, dotnet-sdk) (push) Successful in 52s
Details
Weekly Rebuild (CVE Updates) / rebuild (apko/base.yaml, base) (push) Successful in 46s
Details
Weekly Rebuild (CVE Updates) / rebuild (apko/build.yaml, build) (push) Successful in 34s
Details
Weekly Rebuild (CVE Updates) / rebuild (apko/dotnet-sdk.yaml, dotnet-sdk) (push) Has been cancelled
Details
Weekly Rebuild (CVE Updates) / rebuild (apko/dotnet-runtime.yaml, dotnet-runtime) (push) Has been cancelled
Details

Browse Source 
mode=max embeds full build logs and environment as attestation layers,
roughly doubling the reported image size. mode=min still satisfies
provenance compliance with minimal metadata overhead.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Mathias Beaulieu-Duncan 2026-02-02 10:36:43 -05:00
parent f72130c6bf
commit 9e93d02602
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.gitea/workflows/publish.yaml
View File

@ -126,7 +126,7 @@ jobs:
file: /tmp/Dockerfile file: /tmp/Dockerfile
push: true push: true
sbom: true sbom: true
provenance: mode=max provenance: mode=min
tags: | tags: |
${{ secrets.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ matrix.variant }}-${{ steps.tag.outputs.suffix }} ${{ secrets.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ matrix.variant }}-${{ steps.tag.outputs.suffix }}
${{ secrets.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.version_tag }} ${{ secrets.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.version_tag }}

2
.gitea/workflows/rebuild.yaml
View File

@ -118,7 +118,7 @@ jobs:
file: /tmp/Dockerfile file: /tmp/Dockerfile
push: true push: true
sbom: true sbom: true
provenance: mode=max provenance: mode=min
tags: | tags: |
${{ secrets.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ matrix.variant }}-latest ${{ secrets.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ matrix.variant }}-latest
${{ secrets.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.version_tag }} ${{ secrets.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.version_tag }}

2
.gitea/workflows/update-check.yaml
View File

@ -208,7 +208,7 @@ jobs:
file: /tmp/Dockerfile file: /tmp/Dockerfile
push: true push: true
sbom: true sbom: true
provenance: mode=max provenance: mode=min
tags: | tags: |
${{ secrets.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ matrix.variant }}-latest ${{ secrets.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ matrix.variant }}-latest
${{ secrets.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.version_tag }} ${{ secrets.REGISTRY_URL }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.version_tag }}