From 13ff1533a5b0fb431d26e31b4fcf3f1076f8995d Mon Sep 17 00:00:00 2001
From: camilesing <camilesing@gmail.com>
Date: Fri, 11 Sep 2026 18:44:54 +0800
Subject: [PATCH] fix(ci): disable provenance/sbom to publish plain docker-v2
 manifests

---
 .github/workflows/docker-publish.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 81438a5..36d0594 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -132,6 +132,10 @@ jobs:
           file: build-docker/datapoly/Dockerfile-manager
           platforms: linux/amd64,linux/arm64
           push: true
+          # ACR 不识别 attestation 产生的 OCI empty manifest（vnd.oci.empty.v1+json），
+          # 关闭 provenance/sbom 回退纯 docker-v2 清单
+          provenance: false
+          sbom: false
           tags: ${{ steps.tags.outputs.tags_manager }}
 
       - name: Publish executor
@@ -141,6 +145,8 @@ jobs:
           file: build-docker/datapoly/Dockerfile-executor
           platforms: linux/amd64,linux/arm64
           push: true
+          provenance: false
+          sbom: false
           tags: ${{ steps.tags.outputs.tags_executor }}
 
       - name: Publish gateway
@@ -150,4 +156,6 @@ jobs:
           file: build-docker/datapoly/Dockerfile-gateway
           platforms: linux/amd64,linux/arm64
           push: true
+          provenance: false
+          sbom: false
           tags: ${{ steps.tags.outputs.tags_gateway }}
\ No newline at end of file