From 7213dd758f7bffed18e528b58a6d3471d5d591de Mon Sep 17 00:00:00 2001
From: Jaime Iglesias Blanco <jaimeiglesias@outlook.com>
Date: Wed, 17 Jun 2026 09:03:31 +0200
Subject: [PATCH] ci: disable provenance and remove dockerhub cosign signing

---
 .github/workflows/publish.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a30453e..e71671e 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -98,12 +98,11 @@ jobs:
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+          provenance: false
           cache-from: type=gha
           cache-to: type=gha,mode=max
       - name: Sign GHCR image
         run: cosign sign --yes ghcr.io/wattnet/wattnet-api@${{ steps.build.outputs.digest }}
-      - name: Sign DockerHub image
-        run: cosign sign --yes wattnet/wattnet-api@${{ steps.build.outputs.digest }}
 
   sbom:
     name: Generate and attach SBOMs