Use FROM --platform=$BUILDPLATFORM xxx as builder; Add provenance: false for docker/build-push-action#5