provenance = machine-readable build metadata (source repo, build args, toolchain) embedded as an attestation. Setting --provenance false strips it, shrinking images, while mode=max records full build details. Attestations travel with the image and feed supply-chain tooling.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.