freedomofpress/Reproducible Build
Builds a container image reproducibly using Docker Buildx
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| tags | Tags for the image (comma-separated) | no | — |
| file | Path to the Dockerfile | no | — |
| context | Build context | no | — |
| platforms | Platforms to build for (e.g., linux/amd64,linux/arm64) | no | — |
| buildkit_image | BuildKit image to use | no | moby/buildkit:v0.19.0@sha256:14aa1b4dd92ea0a4cd03a54d0c6079046ea98cd0c0ae6176bdd7036ba370cbbe |
| source_date_epoch | SOURCE_DATE_EPOCH value | no | — |
| timestamp | RFC 3339 timestamp to use as SOURCE_DATE_EPOCH | no | — |
| push | Whether to push to registry | no | false |
| outputs | List of output destinations | no | — |
| annotations | List of annotations to set | no | — |
| labels | List of metadata for an image | no | — |
| build-args | List of build-time variables | no | — |
| cache | Whether to enable caching | no | true |
| cache-from | List of external cache sources | no | — |
| cache-to | List of external cache destinations | no | — |
| cache-map | Mapping of host paths to container paths for caching | no | — |
| secrets | List of secrets to expose to the build | no | — |
| secret-files | List of secret files to expose to the build | no | — |
| ssh | List of SSH agent socket or keys to expose to the build | no | — |
| target | Sets the target stage to build | no | — |
| no-cache | Do not use cache when building the image | no | false |
| pull | Always attempt to pull a newer version of the image | no | false |
| sbom | Generate SBOM attestation | no | false |
| no-setup-buildx | Whether to skip the buildx setup step | no | false |
Outputs
| name | description |
|---|---|
| imageid | Image ID |
| digest | Image digest |
| metadata | Build metadata |