exo-actions/Create publish, sign, cosign and attest docker image
this action allow to create publish, sign, cosign and attest docker image. The sign, cosign and attest are optionnals
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| dockerImage | Docker Image | yes | — |
| dockerImageTag | Docker Image tag (comma separated for multiple) | no | latest |
| dockerFileContext | Dockerfile Context | no | . |
| dockerRegistry | Docker registry (Default docker.io) | no | docker.io |
| generateSBOM | Generate SBOM flag | no | true |
| generateProvenance | Generate provenance flag | no | true |
| platforms | Comma-separated target platforms | no | linux/amd64 |
| signImage | (Deprecated) Enable Docker Image Signing (DCT) | no | false |
| cosignImage | Enable Docker Image Signing (Cosign) | no | false |
| cosignOidcImage | Enable Docker Image Signing (Cosign) with Github OIDC Token (id-token write permission must be provided with cosignImage must be enabled) | no | false |
| attestImage | Enable Docker Image Attestation by Github (attestations and id-token write permissions must be provided) | no | false |
| attestImageRegistry | Docker Image Registry for Attestation by Github (default docker.io) | no | docker.io |
| DOCKER_USERNAME | Docker Registry username | yes | — |
| DOCKER_PASSWORD | Docker Registry user password | yes | — |
| DOCKER_PRIVATE_KEY_ID | Docker Hub Signing Private Key ID | no | — |
| DOCKER_PRIVATE_KEY | Docker Hub Signing Private Key | no | — |
| DOCKER_PRIVATE_KEY_PASSPHRASE | Docker Hub Signing Private Key Passphrase | no | — |
| COSIGN_PRIVATE_KEY | Cosign Signing Private Key | no | — |
| labels | OCI labels for the image (multi-line, key=value) | no | "" |
| annotations | OCI annotations for the image (multi-line, key=value) | no | "" |
| COSIGN_PASSWORD | Cosign Signing Private Key Passphrase | no | false |
| buildArgs | List of build-time arguments (multi-line, KEY=VALUE) | no | "" |
| push | Push the image to registry (set to false for validation-only builds) | no | true |
| qemu | Set up QEMU for cross-platform emulation (disable if all platforms are native) | no | true |
Outputs
no outputs