Remove attestion for Bazel

.github/workflows/publish.yaml

@@ -9,29 +9,16 @@ on:
         required: true
         type: string
 
-  # Fire as soon as the Release workflow completes
-  workflow_run:
-    workflows:
-      - Release
-    types:
-      - completed
-
 permissions:
-
-  attestations: write
   contents:     write
-  id-token:     write
 
 jobs:
   publish:
     uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@v0.0.4
-    # Only run on manual dispatch, or when Release finishes successfully
-    if: |
-      github.event_name == 'workflow_dispatch' ||
-      (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success')
     with:
-      tag_name: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.tag_name || github.event.workflow_run.head_branch }}
+      tag_name: ${{ github.event.inputs.tag_name }}
       registry_fork: ArthurSonzogni/bazel-central-registry
+      attest: false
 
     secrets:
       publish_token: ${{ secrets.PUBLISH_TOKEN }}

.github/workflows/release.yaml

@@ -98,19 +98,3 @@ jobs:
           upload_url: ${{ needs.release.outputs.upload_url }}
           asset_path: source.tar.gz
           overwrite: true
-
-      - name: Generate source attestation
-        id: attest_source
-        uses: actions/attest-build-provenance@v2
-        with:
-          subject-path: source.tar.gz
-
-      - name: Rename source attestation
-        run: mv ${{ steps.attest_source.outputs.bundle-path }} source.tar.gz.intoto.jsonl
-
-      - name: "Upload source attestation"
-        uses: shogo82148/actions-upload-release-asset@v1
-        with:
-          upload_url: ${{ needs.release.outputs.upload_url }}
-          asset_path: source.tar.gz.intoto.jsonl
-          overwrite: true