From e88650281b698e0ce05fbfe277d82af3349504f0 Mon Sep 17 00:00:00 2001
From: naiba <hi@nai.ba>
Date: Sat, 15 Aug 2026 05:37:12 +0000
Subject: [PATCH] ci(release): support registries without attestations

---
 .github/workflows/release.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2716fefb..ba329a9c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -240,6 +240,11 @@ jobs:
           context: .
           file: ./Dockerfile
           platforms: linux/amd64,linux/arm64,linux/s390x
+          # Aliyun Container Registry rejects BuildKit attestation manifests
+          # (application/vnd.oci.empty.v1+json). Both registries share this
+          # multi-platform push, so publish a plain OCI image index here.
+          provenance: false
+          sbom: false
           push: true
           tags: |
             ${{ steps.image-name.outputs.GHCR_IMAGE_NAME }}:latest