From aec7a910f0c527ab2605f816185dda83c7548d60 Mon Sep 17 00:00:00 2001
From: Bryan Van Deusen <bryan.vandeusen@fabledsword.com>
Date: Wed, 1 Apr 2026 23:11:29 -0400
Subject: [PATCH] fix: disable provenance attestation for Forgejo registry
 compatibility

build-push-action@v7 generates OCI attestation manifests by default.
Forgejo's registry doesn't support OCI image index format with attestations,
causing the push to fail with "unknown". provenance: false disables this.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .forgejo/workflows/ci.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 0d145c3..8173cf5 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -139,6 +139,7 @@ jobs:
         with:
           context: .
           push: true
+          provenance: false
           tags: ${{ steps.tags.outputs.value }}
           build-args: BUILD_VERSION=${{ steps.tags.outputs.build_version }}
           cache-from: type=registry,ref=${{ env.IMAGE }}:cache