diff --git a/.github/workflows/docker-image-publish.yaml b/.github/workflows/docker-image-publish.yaml
index 9f0c4cd172..02d9884b4d 100644
--- a/.github/workflows/docker-image-publish.yaml
+++ b/.github/workflows/docker-image-publish.yaml
@@ -66,10 +66,15 @@ jobs:
           mask-password: 'true'
 
       - name: Build and push (Amazon ECR)
+        env:
+          # avoid unknown/unknown attestation manifests
+          BUILDX_NO_DEFAULT_ATTESTATIONS: 1
         run: |
           ./mvnw -B -ntp clean package -DskipTests -Dquarkus.container-image.build=true -Dquarkus.docker.buildx.platform=linux/amd64,linux/arm64 -Dquarkus.container-image.push=true -Dquarkus.container-image.registry=${{ secrets.ECR_REPOSITORY }} -Dquarkus.container-image.tag=${{ github.sha }} -Dquarkus.container-image.additional-tags='' ${{ matrix.profile }}
 
       - name: Build and push image for profiling (Amazon ECR)
+        env:
+          BUILDX_NO_DEFAULT_ATTESTATIONS: 1
         run: |
           ./mvnw -B -ntp clean package -DskipTests -Dquarkus.container-image.build=true -Dquarkus.docker.buildx.platform=linux/amd64,linux/arm64 -Dquarkus.container-image.push=true -Dquarkus.container-image.registry=${{ secrets.ECR_REPOSITORY }} -Dquarkus.container-image.tag=${{ github.sha }} -Dquarkus.container-image.additional-tags='' -Dquarkus.container-image.name=jsonapi-profiling -Dquarkus.docker.dockerfile-jvm-path=src/main/docker/Dockerfile-profiling.jvm ${{ matrix.profile }}
 
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index da07da27df..bb2016543a 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -173,6 +173,9 @@ jobs:
 
       - name: Build data-api image and push (Docker Hub)
         if: ${{ !inputs.skipPublish }}
+        env:
+          # avoid unknown/unknown attestation manifests
+          BUILDX_NO_DEFAULT_ATTESTATIONS: 1
         run: |
           ./mvnw -B -ntp clean package -DskipTests -Dquarkus.container-image.build=true -Dquarkus.docker.buildx.platform=linux/amd64,linux/arm64 -Dquarkus.container-image.push=true  -Dquarkus.container-image.tag=${{needs.resolve-tag.outputs.release-tag}} -Dquarkus.container-image.name=data-api ${{ matrix.profile }}
 
@@ -225,6 +228,7 @@ jobs:
       - name: Build and push (Amazon ECR)
         if: ${{ !inputs.skipPublish }}
         env:
+          BUILDX_NO_DEFAULT_ATTESTATIONS: 1
           QUARKUS_APPLICATION_NAME: 'Astra DB Serverless Data API'
           QUARKUS_SMALLRYE_OPENAPI_INFO_DESCRIPTION: 'The Astra DB Serverless Data API modifies and queries data stored as unstructured JSON documents in collections. See the [documentation site](https://docs.datastax.com/en/astra/astra-db-vector/api-reference/data-api.html) for additional information.'
           QUARKUS_SMALLRYE_OPENAPI_INFO_TERMS_OF_SERVICE: 'https://www.ibm.com/legal'