From a9adb2eff78fc8cdf406ed14b4d35db94b718003 Mon Sep 17 00:00:00 2001
From: Marc Mintel <marc@mintel.me>
Date: Sat, 21 Feb 2026 20:51:12 +0100
Subject: [PATCH] fix(ci): disable provenance to prevent manifest unknown on
 pull

---
 .gitea/workflows/pipeline.yml          | 1 +
 packages/infra/gitea/deploy-action.yml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.gitea/workflows/pipeline.yml b/.gitea/workflows/pipeline.yml
index 4ca68b1..e4dee76 100644
--- a/.gitea/workflows/pipeline.yml
+++ b/.gitea/workflows/pipeline.yml
@@ -213,6 +213,7 @@ jobs:
           file: ${{ matrix.file }}
           platforms: linux/arm64
           pull: true
+          provenance: false
           push: true
           secrets: |
             NPM_TOKEN=${{ secrets.NPM_TOKEN }}
diff --git a/packages/infra/gitea/deploy-action.yml b/packages/infra/gitea/deploy-action.yml
index 5fe4d9d..6ce5526 100644
--- a/packages/infra/gitea/deploy-action.yml
+++ b/packages/infra/gitea/deploy-action.yml
@@ -191,6 +191,7 @@ jobs:
           file: packages/infra/docker/Dockerfile.nextjs
           platforms: linux/arm64
           pull: true
+          provenance: false
           build-args: |
             NEXT_PUBLIC_BASE_URL=${{ needs.prepare.outputs.next_public_base_url }}
             NEXT_PUBLIC_TARGET=${{ needs.prepare.outputs.target }}