From b2670a4478e22eec67ad650bfffb492b186e5aca Mon Sep 17 00:00:00 2001 From: Pyronewbic Date: Wed, 20 May 2026 22:12:37 +0530 Subject: [PATCH 1/2] fix: move --quiet before gcloud beta for component auto-install --- .github/workflows/deploy.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 4487520..5cd3f43 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -75,7 +75,7 @@ jobs: - name: Create Binary Auth attestation run: | - gcloud beta container binauthz attestations sign-and-create --quiet \ + gcloud --quiet beta container binauthz attestations sign-and-create \ --artifact-url="${{ env.IMAGE }}@${{ steps.digest.outputs.digest }}" \ --attestor="projects/${{ env.PROJECT_ID }}/attestors/deploy-attestor" \ --keyversion="projects/${{ env.PROJECT_ID }}/locations/global/keyRings/binary-auth/cryptoKeys/attestor-key/cryptoKeyVersions/1" From 6a4ea434a36cac1b65795d8cc41c47dc8b14714f Mon Sep 17 00:00:00 2001 From: Pyronewbic Date: Wed, 20 May 2026 22:38:29 +0530 Subject: [PATCH 2/2] fix: disable push-to-registry for build provenance attestation --- .github/workflows/deploy.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 5cd3f43..85d785f 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -101,7 +101,7 @@ jobs: with: subject-name: ${{ env.IMAGE }} subject-digest: ${{ steps.digest.outputs.digest }} - push-to-registry: true + push-to-registry: false deploy: needs: build