Forgejo runner with default Docker emits OCI image-index manifests for multi-arch + attestation builds. argocd-image-updater cannot follow the index → manifest chain to read the Created timestamp, so it never sees new tags. Pinning to a single linux/amd64 build with no provenance/sbom produces a plain Docker v2 manifest that image-updater can read. |
||
|---|---|---|
| .. | ||
| build.yaml | ||
| renovate.yaml | ||