Merge pull request #89 from crazy-max/provenance-inline

don't inline provenance in min mode

Author: crazy-max

.github/workflows/bake.yml

@@ -657,9 +657,8 @@ jobs:
             await core.group(`Set bake overrides`, async () => {
               bakeOverrides.push('*.tags=');
               if (GitHub.context.payload.repository?.private ?? false) {
-                // if this is a private repository, we set the default provenance
-                // attributes being set in buildx: https://github.com/docker/buildx/blob/fb27e3f919dcbf614d7126b10c2bc2d0b1927eb6/build/build.go#L603
-                bakeOverrides.push('*.attest=type=provenance,mode=min,inline-only=true,version=v1');
+                // if this is a private repository, we set min provenance mode
+                bakeOverrides.push('*.attest=type=provenance,mode=min,version=v1');
               } else {
                 // for a public repository, we set max provenance mode
                 bakeOverrides.push('*.attest=type=provenance,mode=max,version=v1');

.github/workflows/build.yml

@@ -535,9 +535,8 @@ jobs:
             core.setOutput('labels', inpLabels.join('\n'));
             
             if (GitHub.context.payload.repository?.private ?? false) {
-              // if this is a private repository, we set the default provenance
-              // attributes being set in buildx: https://github.com/docker/buildx/blob/fb27e3f919dcbf614d7126b10c2bc2d0b1927eb6/build/build.go#L603
-              core.setOutput('provenance', 'mode=min,inline-only=true,version=v1');
+              // if this is a private repository, we set min provenance mode
+              core.setOutput('provenance', 'mode=min,version=v1');
             } else {
               // for a public repository, we set max provenance mode
               core.setOutput('provenance', 'mode=max,version=v1');