Skip to content

set provenance: false for image builds #304

set provenance: false for image builds

set provenance: false for image builds #304

Workflow file for this run

name: Build images
on:
push:
branches: main
release:
types:
- published
jobs:
main:
runs-on: ubuntu-latest
steps:
- name: Set up QEMU
uses: docker/setup-qemu-action@v2
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v2
- name: Login to ghcr.io
uses: docker/login-action@v2
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Login to Quay
uses: docker/login-action@v2
with:
registry: ${{ secrets.REGISTRY_SERVER }}
username: ${{ secrets.REGISTRY_USERNAME }}
password: ${{ secrets.REGISTRY_PASSWORD }}
- name: Build and push ${{github.event.release.tag_name }}
id: docker_build_release
uses: docker/build-push-action@v4
if: ${{ github.event.release.tag_name != '' }}
with:
push: true
tags: ghcr.io/bakito/k8s-event-logger:latest,ghcr.io/bakito/k8s-event-logger:${{ github.event.release.tag_name }},quay.io/bakito/k8s-event-logger:latest,quay.io/bakito/k8s-event-logger:${{ github.event.release.tag_name }}
platforms: linux/amd64
provenance: false
build-args: VERSION=${{ github.event.release.tag_name }}
- name: Build and push main
id: docker_build_main
uses: docker/build-push-action@v4
if: ${{ github.event.release.tag_name == '' }}
with:
push: true
tags: ghcr.io/bakito/k8s-event-logger:main,quay.io/bakito/k8s-event-logger:main
platforms: linux/amd64
provenance: false
build-args: VERSION=main
- name: Image digest
run: echo ${{ steps.docker_build.outputs.digest }}
# - name: Prune ghcr images
# uses: vlaurin/action-ghcr-prune@main
# with:
# token: ${{ secrets.PRUNE_IMAGE_TOKEN }}
# container: k8s-event-logger
# dry-run: false # Dry-run first, then change to `false`
# older-than: 7 # days
# untagged: true