relizaio/Rearm Build And Submit Release metadata action
Rearm Build And Submit Release metadata action
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 1, 2026
- License
- None
Pinned Snippet
uses: relizaio/rearm-docker-action@975e8b3d96b53d56d9c21a34b927b6d7b2a52720 # 1.13.4tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| registry_username | Username for image registry | yes | — |
| registry_password | Password for image registry | yes | — |
| registry_host | Host for image registry | no | — |
| image_namespace | Namespace of the image on registry | yes | — |
| image_name | Name of the image | yes | — |
| rearm_api_id | ReARM API ID | yes | — |
| rearm_api_key | ReARM API KEY | yes | — |
| rearm_api_url | ReARM API URL | no | https://demo.rearmhq.com |
| path | Path to the relative to root of the repo (default is '.') | no | . |
| dockerfile_name | Name of the dockerfile (default is 'Dockerfile') | no | Dockerfile |
| ci_metadata | Metadata for CI run, (Optional - default is GitHub) | no | — |
| rearm_component_id | Component UUID for this release if org-wide key is used and not relying on component mapping | no | — |
| push_latest_tag | set to false if you do not want image tagged latest to be pushed | no | true |
| platform_architectures | comma separated list of platform architectures you want to build the image for, default is linux/amd64 | no | linux/amd64 |
| enable_sbom | Generates SBOM and stores it along with the artifact | no | false |
| source_code_sbom_type | Generates SBOM based on source code analysis, possible values: npm, other, none | no | none |
| enable_public_cosign_sigstore | Sign deliverables and SBOMs using public sigstore via cosign | no | false |
| enable_codeql | Enable CodeQL analysis | no | false |
| codeql_language | Language to analyze with CodeQL | no | none |
| successful_build_lifecycle | Status on build success to be set on ReARM (DRAFT or ASSEMBLED) | no | ASSEMBLED |
| enable_securesbom | Enable SecureSBOM by ShiftLeftCyber signing of SBOMs | no | false |
| securesbom_pub_key_id | Public key id to sign with SecureSBOM by ShiftLeftCyber | no | "" |
| securesbom_host | SecureSBOM (by ShiftLeftCyber) host | no | "" |
| securesbom_api_key | SecureSBOM (by ShiftLeftCyber) API key | no | "" |
| push_to_rearm_mirror | Push to ReARM mirror | no | false |
| rearm_mirror_api_id | ReARM Mirror API ID | yes | — |
| rearm_mirror_api_key | ReARM Mirror API KEY | yes | — |
| rearm_mirror_api_url | ReARM Mirror API URL | no | https://demo.rearmhq.com |
| rearm_mirror_component_id | Component UUID on ReARM Mirror for this release if org-wide key is used and not relying on component mapping | no | — |
| create_component | Create component if it doesn't exist | no | false |
| create_component_version_schema | Version schema for created component when it doesn't exist | no | semver |
| create_component_branch_version_schema | Version schema for created component branches when component doesn't exist | no | Branch.Micro |
| allow_rebuild | Allow rebuilding of existing component releases | no | false |
Outputs
no outputs