ci workflow updates (#25)

* update to base and kubectl-shell CI workflows

.github/workflows/base.yaml

@@ -27,7 +27,6 @@ jobs:
         with:
           endpoint: builders
           driver-opts: image=moby/buildkit:v0.16.0
-          platforms: linux/amd64,linux/arm64,linux/arm,linux/ppc64le
 
       - name: "[preparation] docker login"
         uses: docker/[email protected]
@@ -45,7 +44,6 @@ jobs:
             linux/arm64
             linux/arm
             linux/ppc64le
-          attests: |
-            type=sbom,generator=docker/scout-sbom-indexer:latest
-            type=provenance,mode=max
+          sbom: true
+          provenance: true
           push: true

.github/workflows/kubectl-shell.yaml

@@ -49,7 +49,7 @@ jobs:
         uses: docker/[email protected]
         with:
           endpoint: builders
-          driver-opts: image=moby/buildkit:v0.16.0
+          driver-opts: image=moby/buildkit:v0.10.6
 
       - name: "[preparation] docker login"
         uses: docker/[email protected]
@@ -73,12 +73,16 @@ jobs:
             HELM_VERSION=v3.15.4
             KUBERNETES_RELEASE=v1.31.0
           labels: ${{ steps.meta.outputs.labels }}
+          annotations: ${{ steps.meta.outputs.annotations }}
           outputs: type=image,name=${{ env.DOCKER_HUB_REPO }},push-by-digest=true,name-canonical=true,push=true
           cache-from: type=gha
           cache-to: type=gha,mode=max
-          attests: |
-            type=sbom
-            type=provenance,mode=max
+          sbom: false
+          provenance: false
+        env:
+          DOCKER_BUILD_SUMMARY: false
+          DOCKER_BUILD_RECORD_UPLOAD: false
+          DOCKER_BUILD_CHECKS_ANNOTATIONS: false
 
       - name: "[build] export digest"
         run: |
@@ -140,7 +144,7 @@ jobs:
         uses: docker/[email protected]
         with:
           endpoint: builders
-          driver-opts: image=moby/buildkit:v0.16.0
+          driver-opts: image=moby/buildkit:v0.10.6
 
       - name: "[preparation] docker login"
         uses: docker/[email protected]
@@ -151,9 +155,11 @@ jobs:
       - name: "[build] create manifest list and push"
         working-directory: /tmp/digests
         run: |
-          docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
-            $(printf '${{ env.DOCKER_HUB_REPO }}@sha256:%s ' *)          
-      
+          docker manifest create ${{ env.DOCKER_HUB_REPO }}:${{ steps.meta.outputs.version }} \
+            $(printf '${{ env.DOCKER_HUB_REPO }}@sha256:%s ' *)
+
+          docker manifest push ${{ env.DOCKER_HUB_REPO }}:${{ steps.meta.outputs.version }}
+
       - name: "[validate] inspect image"
         run: |
           docker buildx imagetools inspect ${{ env.DOCKER_HUB_REPO }}:${{ steps.meta.outputs.version }}