imp: workflow

Author: Tardo

.github/workflows/main.yml

@@ -88,6 +88,11 @@ jobs:
       packages: write
       attestations: write
       id-token: write
+    env:
+      DEBIAN_FRONTEND: noninteractive
+      REGISTRY: ghcr.io
+      IMAGE_NAME: ${{ github.repository }}
+      LATEST_VERSION: "19.0"
 
     strategy:
       matrix:
@@ -130,10 +135,5 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=gha
           cache-to: type=gha,mode=max
-
-      - name: Attest build provenance
-        uses: actions/attest-build-provenance@v2
-        with:
-          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-          subject-digest: ${{ steps.build-and-push.outputs.digest }}
-          push-to-registry: true
+          provenance: mode=max
+          sbom: true

.pre-commit-config.yaml

@@ -14,7 +14,6 @@ repos:
     - id: hadolint
       name: hadolint (via uv + hadolint-py)
       entry: uv run --with git+https://github.com/AleksaC/hadolint-py.git@v2.14.0 hadolint
-      args: [--verbose]
-      language: system
+      language: python
       types: [dockerfile]
       pass_filenames: true

pyproject.toml

@@ -14,7 +14,6 @@ dependencies = [
     "python-on-whales>=0.78.0,<0.79",
     "pytest>=8.4.2,<9",
     "requests>=2.32.5,<3",
-    "hadolint-bin>=2.12.0,<3",
 ]
 
 [tool.uv]