docker/build-push-action
5,314 Stars·722 Forks·TypeScript·Apache-2.0·3 Aufrufegithub.com/marketplace/actions/build-and-push-docker-images↗
Build Push Action
Dieses Projekt ist eine GitHub Action, die das Builden und Pushen von Docker-Container-Images in OCI-Registries automatisiert. Es fungiert als Multi-Plattform-Container-Builder und -Publisher, der die Buildx-Engine nutzt, um Images zu erstellen, die mit verschiedenen Hardwarearchitekturen kompatibel sind.
Das Tool zeichnet sich durch Sicherheitsfunktionen für die Software-Lieferkette aus, einschließlich der Generierung von Software Bill of Materials (SBOM) und Provenance-Attestierungen zur Überprüfung der Image-Integrität. Es optimiert die Build-Geschwindigkeit durch Remote-Cache-Management und unterstützt die sichere Injektion von Secrets, um zu verhindern, dass sensible Daten in Image-Layern verbleiben.
Der Funktionsumfang umfasst die Konfiguration des Build-Kontexts, einschließlich der Auflösung von Quellcode über Git-URIs, sowie ein metadatengesteuertes Tagging-System zum Anwenden von Labels und Versions-Tags. Zudem bietet es Ausführungszusammenfassungen und Statistiken zur Auditierung von Build-Jobs.
Features
- Multi-Architecture Images - Provides a comprehensive system for building and bundling container images for multiple CPU architectures and operating systems.
- Automated Image Build Pipelines - Automates the end-to-end process of building multi-platform images and pushing them to OCI registries.
- BuildKit-Based Builds - Utilizes the BuildKit engine via Buildx to perform efficient, concurrent container image construction.
- Cross-Platform Build Targets - Enables the specification of multiple hardware architectures as target platforms for the build process.
- OCI Container Registry Clients - Implements an automated process for uploading container images to OCI-compliant registries with custom tagging.
- Docker Image Builds - Automates the build and push cycle of Docker images as a core part of the CI pipeline.
- Docker Container Deployments - Integrates the image creation process into GitHub Actions to ensure images are ready for deployment.
- Multi-Platform Builds - Generates container images targeting multiple hardware architectures and operating systems for broad device compatibility.
- SBOM Attestation Generation - Generates verifiable software bills of materials and provenance attestations for supply chain security.
- Software Supply Chain Security - Secures the software supply chain by generating SBOMs and provenance attestations for container images.
- Remote Cache Management - Accelerates build times by fetching and exporting layer caches to an external registry.
- Build Configurations - Allows the definition of build-time variables, labels, and target stages to control image construction.
- Build Context Resolution - Allows source code to be fetched directly from Git URIs to serve as the build context.
- Remote Build Caches - Accelerates builds by exporting and importing layer caches via external OCI registries.
- Build Context Injectors - Manages the inclusion of local files and remote Git references within the container build context.
- Build Configuration - Provides configuration settings to define how source files and build modes are handled.
- Build Cache Optimizations - Optimizes image construction speed through remote caching and specialized build-time mounts.
- Container Image Tagging - Implements a metadata-driven system for applying version tags and labels to the resulting container images.
- Secret Injection Mechanisms - Injects sensitive credentials into the build process using temporary mounts to prevent secrets from persisting in image layers.
- Secret Mounts - Injects sensitive credentials into the build process using ephemeral mounts to keep them out of image layers.
- Container Image Metadata - Attaches custom labels, version tags, and provenance records to the resulting container images.
- Software Bill of Materials Generators - Automatically generates comprehensive software bills of materials and inventories of components during the build process.
