fix: disable buildx attestations via environment variable instead of --provenance option

Author: carlalexander

src/Executable/AbstractExecutable.php

@@ -49,13 +49,13 @@ protected function isExecutableInstalled(string $executable): bool
     /**
      * Run the executable with the given command and return the Process object used to run it.
      */
-    protected function run(string $command, ?string $cwd = null, ?float $timeout = 60): Process
+    protected function run(string $command, ?string $cwd = null, ?array $env = null, ?float $timeout = 60): Process
     {
         if (!$this->isInstalled()) {
             throw new ExecutableNotDetectedException($this);
         }
 
-        return Process::runShellCommandline(sprintf('%s %s', $this->getExecutable(), $command), $cwd, null, null, $timeout);
+        return Process::runShellCommandline(sprintf('%s %s', $this->getExecutable(), $command), $cwd, $env, null, $timeout);
     }
 
     /**

src/Executable/DockerExecutable.php

@@ -29,12 +29,13 @@ public function build(string $file, string $tag, string $architecture = '', ?str
         }
 
         $command = sprintf('build --pull --file=%s --platform=%s --tag=%s', $file, $platform, $tag);
+        $environment = null;
 
         if ('docker' === $this->getExecutable()) {
-            $command .= ' --provenance=false';
+            $environment = ['BUILDX_NO_DEFAULT_ATTESTATIONS' => '1'];
         }
 
-        $this->run(sprintf('%s .', $command), $cwd, null);
+        $this->run(sprintf('%s .', $command), $cwd, $environment, null);
     }
 
     /**
@@ -72,7 +73,7 @@ public function login(string $username, string $password, string $server, ?strin
      */
     public function push(string $image, ?string $cwd = null): void
     {
-        $this->run(sprintf('push %s', $image), $cwd, null);
+        $this->run(sprintf('push %s', $image), $cwd, null, null);
     }
 
     /**

src/Executable/WpCliExecutable.php

@@ -90,14 +90,14 @@ public function listPlugins(?string $cwd = null): Collection
     /**
      * {@inheritdoc}
      */
-    protected function run(string $command, ?string $cwd = null, ?float $timeout = 60): Process
+    protected function run(string $command, ?string $cwd = null, ?array $env = null, ?float $timeout = 60): Process
     {
         if (function_exists('posix_geteuid') && 0 === posix_geteuid()) {
             throw new WpCliException('WP-CLI commands can only be run as a non-root user');
         }
 
         try {
-            return parent::run($command, $cwd, $timeout);
+            return parent::run($command, $cwd, $env, $timeout);
         } catch (RuntimeException $exception) {
             throw new WpCliException($exception->getMessage(), $exception->getCode(), $exception);
         }