Skip to content

Publish to Docker Hub via GAR#1455

Draft
martincostello wants to merge 7 commits into
mainfrom
publish-to-dockerhub-via-gar
Draft

Publish to Docker Hub via GAR#1455
martincostello wants to merge 7 commits into
mainfrom
publish-to-dockerhub-via-gar

Conversation

@martincostello

Copy link
Copy Markdown
Member

Publish released images to Docker Hub via a Google Artifact Repository mirror.

@martincostello martincostello added dependencies Pull requests that update a dependency file github-actions pir-action-item Action Item from Post Incident Review labels Jun 8, 2026
zeitlinger
zeitlinger previously approved these changes Jun 8, 2026
Publish released images to Docker Hub via a Google Artifact Repository mirror.
- Use output instead of env to set `GIT_COMMIT_EPOCH`.
- Simplify step ID.
- Add step name.
Associate the release publishing with an environment so we can lock down the refs that are allowed to do so.
Allow maximum of 30 minutes to publish (longest I could see was 11 minutes).
- Wait for the image to be mirrored after publish.
- Parameterise some things.
- Add TODO regarding attestation and signing.
Add steps to verify the container image's attestation and signature immediately after they are created.
Don't verify nothing.
martincostello added a commit that referenced this pull request Jun 16, 2026
Changes cherry-picked from #1455 and #1467:

- Use output instead of env for `SOURCE_DATE_EPOCH,
- Verify attestations and signatures.
- Associate ghcr publishing with an environment.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github-actions pir-action-item Action Item from Post Incident Review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants