From 9fe292963c6e3d8d4185eab5328850167b90fa1b Mon Sep 17 00:00:00 2001
From: siujamo <jamo.siu@gmail.com>
Date: Tue, 26 May 2026 10:47:09 +0800
Subject: [PATCH] fix: restrict GitLab CI to main branch and drop --provenance
 flag

- Add main branch guard to pipeline rules
- Remove unsupported --provenance=false flag incompatible with legacy builder
---
 .gitlab-ci.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index fc0e018..477fe78 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -21,7 +21,6 @@ release:
     - JAR_FILE=$(find build/libs -name '*.jar' | head -1)
     - echo "Building Docker image for tag $CI_COMMIT_TAG with JAR $JAR_FILE"
     - docker build
-        --provenance=false
         -f Dockerfile.ci
         --build-arg JAR_FILE="$JAR_FILE"
         -t "$CI_REGISTRY_IMAGE:$CI_COMMIT_TAG"
@@ -32,4 +31,4 @@ release:
     - docker push "$CI_REGISTRY_IMAGE:$CI_COMMIT_TAG"
     - docker push "$CI_REGISTRY_IMAGE:latest"
   rules:
-    - if: $CI_COMMIT_TAG
+    - if: $CI_COMMIT_TAG && $CI_COMMIT_BRANCH == "main"