provenance, sbom off

Author: sorah

.github/workflows/ci.yml

@@ -34,19 +34,16 @@ jobs:
         uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2.0.1
       - run: "echo '${{ github.sha }}' > REVISION"
       - name: 'Build Docker image'
-        uses: 'docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6' # v3.3.1
-        with:
-          context: '.'
-          load: true
-          tags: "sponsor-app-test:latest,${{ steps.login-ecr.outputs.registry }}/sponsor-app:${{ github.sha }},${{ steps.login-ecr.outputs.registry }}/sponsor-app:latest"
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
-      - name: 'Push Docker image'
         uses: 'docker/build-push-action@1104d471370f9806843c095c1db02b5a90c5f8b6' # v3.3.1
         with:
           context: '.'
           push: true
           tags: "${{ steps.login-ecr.outputs.registry }}/sponsor-app:${{ github.sha }},${{ steps.login-ecr.outputs.registry }}/sponsor-app:latest"
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          # prevent manifest from being pushed instead of image on the specified tags for Lambda
+          provenance: false
+          sbom: false
 
   deploy-prod:
     if: "${{ success() && github.event_name == 'push' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/main') }}"