carry0987/Docker Digest Builder

Build and push a single-platform Docker image by digest, then upload it as an artifact for multi-arch manifest merging.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Mar 28, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: carry0987/docker-digest-builder@7695377dfb414556402cc2cb9b5c0f02047e9613 # v1.6.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
imageFull image name (e.g. ghcr.io/org/app)yes
platformTarget platform (e.g. linux/amd64)yes
filePath to Dockerfileno./Dockerfile
contextBuild context pathno.
build-argsBuild arguments (multi-line)no""
provenanceWhether to embed provenance attestation (enables unknown/unknown platform entry)notrue
sbomWhether to embed SBOM attestation (enables extra unknown/unknown platform entry)nofalse
pullAlways pull the latest base imagenofalse
cache-scopeGitHub Actions cache scope (defaults to platform slug)no""
artifact-name-prefixArtifact name prefix for the digest uploadnodigests
retention-daysNumber of days to retain the digest artifactno1
namedescription
digestThe sha256 digest of the pushed image