| docker-registry | Docker Registry | yes | registry.staffbase.com |
| docker-registry-api | Docker Registry API | no | https://registry.staffbase.com/v2/ |
| docker-image | Docker Image | yes | — |
| docker-custom-tag | Docker Custom Tag | no | — |
| docker-tag-timestamp | Insert a UTC timestamp into dev/main/master branch tags (e.g. dev-20260602143055-<short-sha>) to make them sortable for Flux image automation. Enabled by default; set to 'false' for the legacy <prefix>-<short-sha> format. | no | true |
| docker-tag-keep-v-prefix | Keep the leading "v" on release (v*) tags (v1.2.3 -> v1.2.3). Opt-in; defaults to stripping it (v1.2.3 -> 1.2.3). | no | false |
| docker-username | Username for the Docker Registry | no | — |
| docker-password | Password for the Docker Registry | no | — |
| docker-file | Path of the Dockerfile. Should be relative to input.working-directory | yes | ./Dockerfile |
| docker-build-args | List of build-time variables | no | — |
| docker-build-secrets | List of secrets to expose to the build (e.g., key=string, GIT_AUTH_TOKEN=mytoken) | no | — |
| docker-build-secret-files | List of secret files to expose to the build (e.g., key=filename, MY_SECRET=./secret.txt) | no | — |
| docker-build-target | Sets the target stage to build | no | — |
| docker-build-platforms | Sets the target platforms for build | no | linux/amd64 |
| docker-build-provenance | Generate provenance attestation for the build | no | false |
| docker-build-outputs | Custom output destinations (e.g., type=registry,push=true,compression=zstd,force-compression=true). When set, this replaces the default push behavior - include push=true if pushing is desired. | no | — |
| docker-disable-retagging | Disable retagging of existing images | no | false |
| gitops-organization | GitHub Organization for GitOps | yes | Staffbase |
| gitops-repository | GitHub Repository for GitOps | yes | mops |
| gitops-user | GitHub User for GitOps | yes | Staffbot |
| gitops-email | GitHub User for GitOps | yes | staffbot@staffbase.com |
| gitops-token | GitHub Token for GitOps | no | — |
| gitops-dev | Files which should be updated by the GitHub Action for DEV | no | — |
| gitops-stage | Files which should be updated by the GitHub Action for STAGE | no | — |
| gitops-prod | Files which should be updated by the GitHub Action for PROD | no | — |
| upwind-client-id | Upwind Client ID | no | — |
| upwind-organization-id | Upwind Organization ID | no | — |
| upwind-client-secret | Upwind Client Secret | no | — |
| working-directory | The path relative to the repo root dir in which the GitOps action should be executed. | no | . |