1k-off/ORAS Push Action

Push artifacts using ORAS CLI

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Maintainedlast commit Jul 5, 2025
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: 1k-off/action-oras-push@35003b2e3be11a174d8a8969d5990222db42cf4c # v1.1.1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
registryThe OCI registry URLyes
usernameRegistry username (optional if already authenticated)no
passwordRegistry password or token (optional if already authenticated)no
repositoryTarget repository nameyes
tagTag for the artifactyeslatest
filesFiles to push (space-separated list with optional media types, e.g., "file1:type1 file2:type2"). For directories, use dir/:mediatype format.yes
keep-full-pathKeep the full source path in the artifact. Only works when single input is provided.nofalse
keep-root-dirKeep the root directory in the artifact. If false, only contents are included. Only works when single input is provided.nofalse
annotation-filePath to annotation fileno
manifest-annotationsManifest annotations (key=value pairs)no
plain-httpAllow plain HTTP connectionsnofalse
insecureSkip TLS verificationnofalse

no outputs