diff --git a/.github/workflows/containers.build.yaml b/.github/workflows/containers.build.yaml
index 418c5fbc422..f7b6f8d4332 100644
--- a/.github/workflows/containers.build.yaml
+++ b/.github/workflows/containers.build.yaml
@@ -302,17 +302,19 @@ jobs:
           cosign verify quay.io/tccr/${{ matrix.container }}@${{ steps.push.outputs.digest }} --certificate-oidc-issuer=https://token.actions.githubusercontent.com --certificate-identity=https://github.com/truecharts/public/.github/workflows/containers.build.yaml@refs/heads/master
 
       - name: Generate SBOM
+        id: generate_sbom
         if: github.event_name != 'pull_request'
+        continue-on-error: true
         run: |
           syft "quay.io/tccr/${{ matrix.container }}:v${{ steps.prep.outputs.version }}@${{ steps.push.outputs.digest }}" -o spdx-json=${{ matrix.container }}-sbom-spdx.json
 
       - name: Attach SBOM to image
-        if: github.event_name != 'pull_request'
+        if: github.event_name != 'pull_request' && steps.generate_sbom.outcome == 'success'
         run: |
           cosign attest --predicate ${{ matrix.container }}-sbom-spdx.json --type spdx "quay.io/tccr/${{ matrix.container }}@${{ steps.push.outputs.digest }}" -y
 
       - name: Verify SBOM attestation
-        if: github.event_name != 'pull_request'
+        if: github.event_name != 'pull_request' && steps.generate_sbom.outcome == 'success'
         run: |
           cosign verify-attestation quay.io/tccr/${{ matrix.container }}@${{ steps.push.outputs.digest }}  --type https://spdx.dev/Document --certificate-oidc-issuer=https://token.actions.githubusercontent.com --certificate-identity=https://github.com/truecharts/containers/.github/workflows/containers.build.yaml@refs/heads/master | jq '.payload |= @base64d | .payload | fromjson'
 
diff --git a/containers/apps/renovate/Dockerfile b/containers/apps/renovate/Dockerfile
index 553ed549eb1..a6fb91343a5 100644
--- a/containers/apps/renovate/Dockerfile
+++ b/containers/apps/renovate/Dockerfile
@@ -4,6 +4,7 @@ FROM docker.io/renovate/renovate:39.234.0-full
 ARG VERSION
 ARG CONTAINER_NAME
 ARG CONTAINER_VER
+ARG TEST
 
 # Download and set up the clustertool binary
 RUN curl -L "https://github.com/truecharts/public/releases/download/v${VERSION}/clustertool_${VERSION}_linux_amd64.tar.gz" -o /tmp/clustertool.tar.gz \