Skip to content

[DNM] Test publishing via GAR#1467

Draft
martincostello wants to merge 22 commits into
mainfrom
test-image-mirroring-to-dockerhub
Draft

[DNM] Test publishing via GAR#1467
martincostello wants to merge 22 commits into
mainfrom
test-image-mirroring-to-dockerhub

Conversation

@martincostello

Copy link
Copy Markdown
Member

Changes to test publishing to DockerHub via GAR.

Changes to test publishing to DockerHub via GAR.
Comment thread .github/workflows/ghcr-image-build-and-publish.yml Fixed
Copy-pasta from README.
Fix typo to fix CI.
Add steps to verify the attestation and signature during publishing.
Make the image name include the owner.
Add missing token for using `gh`.
Cannot verify the image if it isn't there...
Remove `oci://` prefixes.
Enable to test workflow.
Fix incorrect `gar-repository` value.
Otherwise the image isn't there to fetch to attest.
- Add job to wait for mirroring.
- Move attestation and signing to after the mirror completes.
Fix permissions after splitting jobs.
Need to push the artifacts to GAR but as docker.io.
Change gar-image to match the name we use in Docker Hub.
Change the subject to (hopefully) match GAR.
Remove the image name from `gar-repository`.
Use the first tag.
- Add explicit `gar-registry`.
- Add env values to reduce copy-pasta.
- Authenticate with GAR to allow attestation and signing.
Use the repo's name not it's full name for `gar-repository`.
Try `dev` instead of `global`.
Definitely doesn't work.
martincostello added a commit that referenced this pull request Jun 16, 2026
Changes cherry-picked from #1455 and #1467:

- Use output instead of env for `SOURCE_DATE_EPOCH,
- Verify attestations and signatures.
- Associate ghcr publishing with an environment.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants