actions-marketplace-validations/Build Docker images with Depot
Build and push Docker images with Depot
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Feb 3, 2026
- License
- MIT
Pinned Snippet
uses: actions-marketplace-validations/depot_build-push-action@5f3b3c2e5a00f0093de47f657aeaefcedff27d18 # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| add-hosts | List of a customs host-to-IP mapping (e.g., docker:10.180.0.1) | no | — |
| allow | List of extra privileged entitlement (e.g., network.host,security.insecure) | no | — |
| annotations | List of annotation to set to the image | no | — |
| attests | List of attestation parameters (e.g., type=sbom,generator=image) | no | — |
| build-args | List of build-time variables | no | — |
| build-contexts | List of additional build contexts (e.g., name=path) | no | — |
| build-platform | Override the build execution platform (e.g., linux/amd64 or linux/arm64) | no | — |
| buildx-fallback | Fallback to `docker buildx build` if `depot build` fails | no | false |
| cache-from | List of external cache sources for buildx (e.g., user/app:cache, type=local,src=path/to/dir) | no | — |
| cache-to | List of cache export destinations for buildx (e.g., user/app:cache, type=local,dest=path/to/dir) | no | — |
| cgroup-parent | Optional parent cgroup for the container used in the build | no | — |
| context | Build's context is the set of files located in the specified PATH or URL | no | — |
| file | Path to the Dockerfile | no | — |
| github-token | GitHub Token used to authenticate against a repository for Git context | no | ${{ github.token }} |
| labels | List of metadata for an image | no | — |
| lint | Lint dockerfiles and fail build if any issues are at least the lint-fail-on severity | no | false |
| lint-fail-on | Severity of linter issue to cause the build to fail. (e.g., error, warn, info, none) | no | — |
| load | Load is a shorthand for --output=type=docker | no | false |
| network | Set the networking mode for the RUN instructions during build | no | — |
| no-cache | Do not use cache when building the image | no | false |
| no-cache-filters | Do not cache specified stages | no | — |
| outputs | List of output destinations (format: type=local,dest=path) | no | — |
| platforms | List of target platforms for build | no | — |
| provenance | Generate provenance attestation for the build (shorthand for --attest=type=provenance) | no | — |
| project | Depot project ID | no | — |
| pull | Always attempt to pull all referenced images | no | false |
| push | Push is a shorthand for --output=type=registry | no | false |
| save | Save the image to the Depot Registry | no | false |
| save-tag | Tag your image in the Depot Registry | no | — |
| save-tags | Tags for your image in the Depot Registry | no | — |
| sbom | Generate SBOM attestation for the build (shorthand for --attest=type=sbom) | no | — |
| sbom-dir | Directory to output SBOMs for each built image | no | — |
| secrets | List of secrets to expose to the build (e.g., key=string, GIT_AUTH_TOKEN=mytoken) | no | — |
| secret-files | List of secret files to expose to the build (e.g., key=filename, MY_SECRET=./secret.txt) | no | — |
| shm-size | Size of /dev/shm (e.g., 2g) | no | — |
| ssh | List of SSH agent socket or keys to expose to the build | no | — |
| tags | List of tags | no | — |
| target | Sets the target stage to build | no | — |
| token | Depot Token used to authenticate with the remote builder instance | no | — |
| ulimit | Ulimit options (e.g., nofile=1024:1024) | no | — |
Outputs
| name | description |
|---|---|
| imageid | Image ID |
| digest | Image digest |
| metadata | Build result metadata |
| build-id | Build ID |
| project-id | Project ID |