bake-action adds provenance mode=min even if in docker-bake file provenance is set to max

[marverix]

Contributing guidelines

• I've read the contributing guidelines and wholeheartedly agree

I've found a bug, and:

• The documentation does not mention anything about my problem
• There are no open or closed issues that are related to my problem

Description

As in the title. If one has *.attest.provenance.mode=max in docker-bake file, but will not set also provenance: max in bake-action, bake-action will set the provenance to min (if I'm working on the private repo - which is the case).

Expected behaviour

bake-action should auto-set provenance only if there is no attest.provenance set in docker-bake file whatsoever.

Actual behaviour

bake-action overwrites docker-bake settings

Repository URL

No response

Workflow run URL

No response

YAML workflow

N/A

Workflow logs

No response

BuildKit logs

Additional info

No response