cloudposse/Docker build and push

Simple Docker build and push action

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Mar 19, 2026
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: cloudposse/github-action-docker-build-push@f06d0f4bd286898b613412d2fcc6622e5b68bbdc # v3.0.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
allowList of extra privileged entitlement (e.g., network.host,security.insecure)no
networkSet the networking mode for the RUN instructions during buildno
build-contextsList of additional build contexts (e.g., name=path)no
buildkitd-flagsBuildKit daemon flagsno--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host
driver-optsList of additional driver-specific options. (eg. image=moby/buildkit:master)noimage=mirror.gcr.io/moby/buildkit:buildx-stable-1
binfmt-imageBinfmt imagenopublic.ecr.aws/eks-distro-build-tooling/binfmt-misc:qemu-v7.0.0
workdirWorking directoryno./
fileDockerfile namenoDockerfile
build-argsList of build-time variablesno
organizationOrganizationyes
repositoryRepositoryyes
registryDocker registryyes
targetSets the target stage to buildno""
platformsList of target platforms for build (e.g. linux/amd64,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,etc)nolinux/amd64
provenanceGenerate provenance attestation for the buildno
image_nameImage name (excluding registry). Defaults to {{$organization/$repository}}.no""
loginDocker loginno""
passwordDocker passwordno""
cache-fromList of external cache sources for buildx (e.g., user/app:cache, type=local,src=path/to/dir)notype=gha
cache-toList of cache export destinations for buildx (e.g., user/app:cache, type=local,dest=path/to/dir)notype=gha,mode=max
no-cacheSend the --no-cache flag to the docker build processnofalse
sshList of SSH agent socket or keys to expose to the buildno
tagsList of tags (supports https://github.com/docker/metadata-action#tags-input)no
secretsList of secrets to expose to the build (e.g., key=string, GIT_AUTH_TOKEN=mytoken)no
secret-filesList of secret files to expose to the build (e.g., key=filename, MY_SECRET=./secret.txt)no
docker-metadata-pr-head-shaSet to `true` to tag images with the PR HEAD SHA instead of the merge commit SHA within pull requests.nofalse
inspectSet to `true` will pull and inspect the image and output it.nofalse
summarySet to `true` will create step summary.notrue
debugEnable debug modenofalse
namedescription
imageDocker image name
tagDocker image tag
metadataDocker image metadata
inspectDocker image inspect metadata