Skip to content

Latest commit

 

History

History
40 lines (29 loc) · 1.35 KB

README.md

File metadata and controls

40 lines (29 loc) · 1.35 KB
Raw

publish-image

Manifest: publish-image/action.yml

This action signs and publishes a single container image to the given registry. It does the following work:

  1. Tag the source-image-uri with the specified image-registry-uti, image-repository, and image-repository.
  2. Push the container image to the specified registry.
  3. Sign the container image (which pushes the signature to the specified registry).
  4. Generate an SBOM via a syft scan.
  5. Attest an image with the SBOM as a predicate (which pushes the attestation to the specified registry).

Inputs and Outputs

Tip

For descriptions of the inputs and outputs, see the complete publish-image action.

Important

For multi-arch images, the image-manifest-tag should have the -$ARCH suffix, as the tag without it should be reserved for the image index manifest which will refer to container images for each architecture we will push images for.

Inputs

  • image-registry-uri (eg: oci.stackable.tech)
  • image-registry-username (required)
  • image-registry-password (required)
  • image-repository (eg: stackable/kafka)
  • image-manifest-tag (eg: 3.4.1-stackable0.0.0-dev-amd64)
  • source-image-uri (eg: localhost/kafka:3.4.1-stackable0.0.0-dev-amd64)

Outputs

None