relizaio/RelizaHub Build And Submit Release metadata action
RelizaHub Build And Submit Release metadata action
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Jan 7, 2026
- License
- None
Pinned Snippet
uses: relizaio/reliza-docker-action@a8ba201f314e111885f1ec036e8eeabcb02739be # 3.14tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| registry_username | Username for image registry | yes | — |
| registry_password | Password for image registry | yes | — |
| registry_host | Host for image registry | no | — |
| image_namespace | Namespace of the image on registry | yes | — |
| image_name | Name of the image | yes | — |
| reliza_api_id | Reliza Hub API ID | yes | — |
| reliza_api_key | Reliza Hub API KEY | yes | — |
| reliza_api_url | Reliza Hub API URL | no | https://app.relizahub.com |
| path | Path to the relative to root of the repo (default is '.') | no | . |
| dockerfile_name | Name of the dockerfile (default is 'Dockerfile') | no | Dockerfile |
| ci_metadata | Metadata for CI run, (Optional - default is GitHub) | no | — |
| reliza_project_id | Project UUID for this release if org-wide key is used | no | — |
| push_latest_tag | set to false if you do not want image tagged latest to be pushed | no | true |
| no_cache | Set to true to disable docker build cache | no | false |
| platform_architectures | comma separated list of platform architectures you want to build the image for, default is linux/amd64 | no | linux/amd64 |
| enable_sbom | Generates SBOM and stores it along with the artifact on Reliza Hub, ReARM settings listed below | no | false |
| push_to_rearm | Whether to handle SBOM logic via ReARM and push release there as well. Below options are required for ReARM. | no | false |
| rearm_api_id | ReARM API ID | no | — |
| rearm_api_key | ReARM API KEY | no | — |
| rearm_api_url | ReARM API URL | no | https://demo.rearmhq.com |
| rearm_component_id | Component UUID for this release on ReARM if org-wide key is used | no | — |
| source_code_sbom_type | Generates SBOM based on source code analysis, possible values: npm, dotnet, other, none | no | none |
| rearm_enable_public_cosign_sigstore | Sign deliverables and SBOMs using public sigstore via cosign | no | false |
| rearm_enable_codeql | Enable CodeQL analysis | no | false |
| rearm_codeql_language | Language to analyze with CodeQL | no | none |
Outputs
no outputs