build: disable provenance attestations in container builds

[mostlygeek]

Summary

• Add --provenance=false to docker build commands in build-container.sh
• BuildKit attestation manifests are stored as untagged images in GHCR, and the delete-untagged-containers cleanup job deletes them, breaking the manifest list and causing manifest unknown errors on pull
• ref: delete-only-untagged-versions seems to eat also manifests of tagged versions actions/delete-package-versions#162

Summary by CodeRabbit

• Chores
  • Updated CI/CD workflow permissions to support package publishing.
  • Optimized container build configuration for improved build efficiency.

[coderabbitai]

Caution

Review failed

The pull request is closed.

Walkthrough

This PR adds GitHub Actions token permissions for package publishing to the container workflow and disables Docker build provenance in the build script by adding the --provenance=false flag to docker build invocations.

Changes

Cohort / File(s)	Summary
GitHub Actions Workflow Permissions .github/workflows/containers.yml	Adds a permissions block granting GITHUB_TOKEN access with contents: read, packages: write, and id-token: write for enabling package publishing capabilities.
Docker Build Configuration docker/build-container.sh	Adds --provenance=false flag to both llama-swap.Containerfile and llama-swap-sd.Containerfile docker build invocations.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~4 minutes

Possibly related PRs

• .github/workflows: fix expired token in publishing images #522: Modifies the same GitHub Actions workflow permissions block with identical token configuration changes.
• feat: Add support for custom llama.cpp base image and forked llama-swap repositories #396: Modifies docker/build-container.sh docker build invocations with alternative parameterization and build argument changes.
• Improve container workflow and build script #457: Updates both the container workflow configuration and docker build script with overlapping structural and command modifications.

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch fix-container-publish

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}