revert: "chore: enable SBOM attestation for image builds" (#16868)

Reverts coder/coder#16852

The CI failed to create the multi-arch manifest.

https://github.com/coder/coder/actions/runs/13773079355/job/38516182819#step:18:341

I personally think we should move to a [multi-arch
Dockerfile](https://docs.docker.com/build/building/multi-platform/#cross-compilation)
instead of creating the manifest manually.
This commit is contained in:
M Atif Ali
2025-03-11 00:55:03 +05:00
committed by GitHub
parent 05ebece03a
commit e817713dc0
3 changed files with 2 additions and 8 deletions

View File

@ -361,7 +361,6 @@ jobs:
file: scripts/Dockerfile.base file: scripts/Dockerfile.base
platforms: linux/amd64,linux/arm64,linux/arm/v7 platforms: linux/amd64,linux/arm64,linux/arm/v7
provenance: true provenance: true
sbom: true
pull: true pull: true
no-cache: true no-cache: true
push: true push: true

View File

@ -1,6 +1,3 @@
{ {
"registry-mirrors": ["https://mirror.gcr.io"], "registry-mirrors": ["https://mirror.gcr.io"]
"features": {
"containerd-snapshotter": true
}
} }

View File

@ -136,12 +136,10 @@ fi
log "--- Building Docker image for $arch ($image_tag)" log "--- Building Docker image for $arch ($image_tag)"
docker buildx build \ docker build \
--platform "$arch" \ --platform "$arch" \
--build-arg "BASE_IMAGE=$base_image" \ --build-arg "BASE_IMAGE=$base_image" \
--build-arg "CODER_VERSION=$version" \ --build-arg "CODER_VERSION=$version" \
--provenance true \
--sbom true \
--no-cache \ --no-cache \
--tag "$image_tag" \ --tag "$image_tag" \
-f Dockerfile \ -f Dockerfile \