don't use docker cache when building

.gitea/workflows/build_and_publish.yaml

@@ -7,10 +7,8 @@ env:
 
 on:
   push:
-    tags:
-      - '*'
   schedule:
-    - cron: "0 12 3 * *"
+    - cron: "0 12 * * 3"
   workflow_dispatch:
   workflow_call:
   workflow_run:
@@ -48,7 +46,7 @@ jobs:
         run: |
           docker build \
             --tag ${{ env.REGISTRY }}/${{ env.REPOSITORY }}:latest-${{ matrix.arch }} \
-            --platform linux/${{ matrix.arch }} -f Dockerfile .
+            --platform linux/${{ matrix.arch }} --no-cache -f Dockerfile .
           docker push ${{ env.REGISTRY }}/${{ env.REPOSITORY }}:latest-${{ matrix.arch }}
 
   manifest:

.gitea/workflows/vulnscan.yaml

@@ -61,4 +61,4 @@ jobs:
           token: ${{ secrets.TELEGRAM_TOKEN }}
           format: markdown
           message: |
-            Found **${{ steps.vulncount.outputs.VULNCOUNT }}** vulnerabilities in `${{ github.repository }}`
+            Found **${{ steps.vulncount.outputs.VULNCOUNT }}** vulnerabilities in `${{ env.REGISTRY }}/${{ env.REPOSITORY }}:latest`

Dockerfile

@@ -1,8 +1,8 @@
-FROM alpine:3.21
+FROM alpine:3.22
 
 RUN \
-  apk -U upgrade && \
+  apk --no-cache upgrade && \
-  apk add mosquitto mosquitto-clients openssl && \
+  apk --no-cache add mosquitto mosquitto-clients openssl && \
   echo "log_dest stdout" >/etc/mosquitto/mosquitto.conf && \
   echo "listener 1883" >>/etc/mosquitto/mosquitto.conf && \
   echo "allow_anonymous true" >>/etc/mosquitto/mosquitto.conf