eyecantcu/Image Action

Builds, pushes, and signs an image

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stale
License
None
namedescriptionrequireddefault
imageThe name (reference) of the image to buildno
tagsThe tags of the image to build. For multiple tags, seperate by whitespace. For example, "latest v1".nolatest
labelsThe labels of the image to build. Seperate by newline. For example, "io.containers.capabilities=sys_admin,mknod".no
base-imageThe base image to use to create a new container imageno
containerfilesList of Containerfile paths (eg: ./Containerfile)no
dockerfilesAlias for "containerfiles". "containerfiles" takes precedence if both are set.no
contextPath of the directory to use as context (default: .)no.
contentList of files/directories to copy inside the base imageno
entrypointThe entry point to set for containers based on imageno
layersSet to true to cache intermediate layers during build processno
portThe port to expose when running containers based on imageno
workdirThe working directory to use within the containerno
envsList of environment variables to be set when running containers based on imageno
build-argsList of --build-args to pass to buildahno
ociSet to true to build using the OCI image format instead of the Docker image formatnofalse
archLabel the image with this ARCH, instead of defaulting to the host architectureno
archs'Same as input 'arch', use this for multiple architectures. Seperate them by a comma' no
platformLabel the image with this PLATFORM, instead of defaulting to the host platform. Only supported for containerfile builds. no
platforms'Same as input 'platform', use this for multiple platforms. Seperate them by a comma' no
build-extra-argsExtra args to be passed to buildah bud and buildah from. Separate arguments by newline. Do not use quotes - @actions/exec will do the quoting for you. no
registryHostname and optional namespace to push the image to (eg. quay.io/username or quay.io)no
usernameUsername to use as credential to authenticate to the registryno
passwordPassword to use as credential to authenticate to the registryno
tls-verifyVerify TLS certificates when contacting the registrynotrue
digestfileAfter copying the image, write the digest of the resulting image to the file. By default, the filename will be determined from the image and tag. The contents of this file are the digest output. no
push-extra-argsExtra args to be passed to podman push. Separate arguments by newline. Do not use quotes - @actions/exec will do the quoting for you. no
registry-tokenPassword for container registryyes
signing-secretPrivate key used to sign target container.yes
verify-imageBase image to verifyno
verify-pubkeyPublic key used to verify base imageno

no outputs