feat: add flag to disable provenance for lambda images (#376)

## Description

AWS Lambdas don't like multi-architecture builds. This allows disabling that to get the image format needed

Author: theProf

src/commands/track/update_track.yml

@@ -103,6 +103,10 @@ parameters:
     description: push the image to the registry
     type: boolean
     default: true
+  disable_provenance:
+    description: disable provenance for image. necessary for lambda images
+    type: boolean
+    default: false
 steps:
   - when:
       condition: << parameters.checkout >>
@@ -157,4 +161,5 @@ steps:
         UPDATE_TRACK_FILE: << parameters.update_track_file >>
         ENABLE_PUSH: "<< parameters.enable_push >>"
         SEM_VER_OVERRIDE: "<< parameters.sem_ver_override >>"
+        DISABLE_PROVENANCE: "<< parameters.disable_provenance >>"
       command: <<include(scripts/track/update_track.sh)>>

src/jobs/track/update_track.yml

@@ -107,6 +107,10 @@ parameters:
     description: Determines if the track file will be updated or not
     type: boolean
     default: true
+  disable_provenance:
+    description: disable provenance for image. necessary for lambda images
+    type: boolean
+    default: false
 steps:
   - update_track:
       image_repo: "<< parameters.image_repo >>"
@@ -134,3 +138,4 @@ steps:
       update_track_file: "<< parameters.update_track_file >>"
       enable_push: "<< parameters.enable_push >>"
       sem_ver_override: "<< parameters.sem_ver_override >>"
+      disable_provenance: "<< parameters.disable_provenance >>"

src/scripts/track/update_track.sh

@@ -19,6 +19,7 @@ echo "ENABLE_CACHE_TO: ${ENABLE_CACHE_TO:=0}"
 echo "ENABLE_LOAD: ${ENABLE_LOAD:=0}"
 echo "ENABLE_PUSH: ${ENABLE_PUSH:=0}"
 echo "UPDATE_TRACK_FILE: ${UPDATE_TRACK_FILE:=0}"
+echo "DISABLE_PROVENANCE: ${DISABLE_PROVENANCE:=0}"
 
 # force string to array
 read -r -a EXTRA_BUILD_ARGS <<<"$EXTRA_BUILD_ARGS"
@@ -129,6 +130,10 @@ if [[ $IMAGE_EXISTS == "false" || "$CIRCLE_BRANCH" == "master" || "$CIRCLE_BRANC
     OUTPUT_ARGS+=(--load)
   fi
 
+  if ((DISABLE_PROVENANCE)); then
+    OUTPUT_ARGS+=(--provenance=false)
+  fi
+
   NPM_TOKEN_SECRET=(--secret id=NPM_TOKEN)
 
   CACHE_FROM_ARG=(--cache-from "${IMAGE_REPO-}:cache-master")