Set provenance false in bake files

Image Builds
1

Hello,

My question is, are attest = [ "type=provenance,disable=false" ] and --provenance false the same?
Also is this the correct way to build an image for aws ecr ? if there is a correct way.

For more context, pushed to aws ecr the image created by the following target block, without attest and it pushed multiple images / layers and one of type index. After a quick search on google i found that building the image with --provenance false then pushing it it pushes only 1 image as i expect.

Search the docker docs but i didn’t found anything, AI gave this attest = [ "type=provenance,disable=false" ] but i didn’t test it.

target "base_service" {
  dockerfile = "dockerfiles/Dockerfile.base_service"
  tags = [ "${ECR_HOST}/flow-nodejs:${VSN}" ]
  platforms = [ "linux/amd64" ]
}
  • OS Version/build: Windows 11 25H2 26200.8655
  • App version: 4.81.0

Thank you, and sorry if this is actually covered by documentation.

2

Did some testing and:
attest = [ "type=provenance,disable=false" ] - not working
outputs = [{ type: "image / registry " }] - not working
provenance = false - not working
sbom = false - not working
And a few more and nothing worked.