rohdef/Build container

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jun 14, 2026
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: rohdef/action-build-scan-push-container@065000028077c95306ad761f0a8c1a859f426e8d # no releases — HEAD as of 2026-07-11

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
annotationsList (new line for each entry) of annotation to set to the imageno
build-argsList of build-time variablesno
dockerfile-pathPath to the Dockerfileyes
labelsList (new line for each entry) of metadata for an imageno
destination-hostsWhere to upload the artifact to - if only local is desired just use "localhost:5000" - trailing slash is not allowed. Must be a text with a yaml array of hostsyes- ghcr.io
destination-image-namesMust be a text with a yaml array of hostsyes- ${{ github.repository }}
auto-taggingyesTAGS_AS_RELEASE
destination-tagsMust be a text with a yaml array of hosts.yes[]
namedescription
image-idImage ID/name for the intermediate image - probably a UUID or similar random string/value
digestImage digest for usage in helm charts or other deployments where it is desired to lock the version to this build
images-pushedFull list (as yaml array) of image names pushed