From 13c6430dee50284942474a8bd6e98f9cc733f655 Mon Sep 17 00:00:00 2001
From: Daniel Volz <mail@danielvolz.org>
Date: Sat, 17 Jan 2026 22:22:35 +0100
Subject: [PATCH] fix(ci): disable provenance/sbom to remove unknown/unknown
 image (#35)

---
 .github/workflows/docker-build.yml | 2 ++
 .github/workflows/test.yml         | 4 ----
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
index dd135b8..a778ab1 100644
--- a/.github/workflows/docker-build.yml
+++ b/.github/workflows/docker-build.yml
@@ -118,6 +118,8 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
           platforms: linux/amd64,linux/arm64
+          provenance: false
+          sbom: false
 
   # =============================================================================
   # Create GitHub Release (only on tag push)
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index e1cff7c..cc75234 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -3,10 +3,6 @@ name: Test
 on:
   pull_request:
     branches: [main]
-    paths:
-      - 'backend/**'
-      - 'frontend/**'
-      - '.github/workflows/test.yml'
 
 # Minimal permissions for security
 permissions: