Build Push Action

这是一个 GitHub Action，用于自动化构建 Docker 容器镜像并将其推送到 OCI 注册表。它作为一个多平台容器构建器和发布器，使用 Buildx 引擎创建兼容多种硬件架构的镜像。

该工具通过软件供应链安全功能脱颖而出，包括生成软件物料清单（SBOM）和来源证明以验证镜像完整性。它通过远程缓存管理优化构建速度，并支持安全密钥注入，以防止敏感数据残留在镜像层中。

功能面涵盖构建上下文配置（包括通过 Git URI 解析源代码）以及用于应用标签和版本标记的元数据驱动标记系统。它还提供执行摘要和统计信息，以审计构建作业结果。

Features

Multi-Architecture Images - Provides a comprehensive system for building and bundling container images for multiple CPU architectures and operating systems.
Automated Image Build Pipelines - Automates the end-to-end process of building multi-platform images and pushing them to OCI registries.
BuildKit-Based Builds - Utilizes the BuildKit engine via Buildx to perform efficient, concurrent container image construction.
Cross-Platform Build Targets - Enables the specification of multiple hardware architectures as target platforms for the build process.
OCI Container Registry Clients - Implements an automated process for uploading container images to OCI-compliant registries with custom tagging.
Docker Image Builds - Automates the build and push cycle of Docker images as a core part of the CI pipeline.
Docker Container Deployments - Integrates the image creation process into GitHub Actions to ensure images are ready for deployment.
Multi-Platform Builds - Generates container images targeting multiple hardware architectures and operating systems for broad device compatibility.
SBOM Attestation Generation - Generates verifiable software bills of materials and provenance attestations for supply chain security.
Software Supply Chain Security - Secures the software supply chain by generating SBOMs and provenance attestations for container images.
Remote Cache Management - Accelerates build times by fetching and exporting layer caches to an external registry.
Build Configurations - Allows the definition of build-time variables, labels, and target stages to control image construction.
Build Context Resolution - Allows source code to be fetched directly from Git URIs to serve as the build context.
Remote Build Caches - Accelerates builds by exporting and importing layer caches via external OCI registries.
Build Context Injectors - Manages the inclusion of local files and remote Git references within the container build context.
Build Configuration - Provides configuration settings to define how source files and build modes are handled.
Build Cache Optimizations - Optimizes image construction speed through remote caching and specialized build-time mounts.
Container Image Tagging - Implements a metadata-driven system for applying version tags and labels to the resulting container images.
Secret Injection Mechanisms - Injects sensitive credentials into the build process using temporary mounts to prevent secrets from persisting in image layers.
Secret Mounts - Injects sensitive credentials into the build process using ephemeral mounts to keep them out of image layers.
Container Image Metadata - Attaches custom labels, version tags, and provenance records to the resulting container images.
Software Bill of Materials Generators - Automatically generates comprehensive software bills of materials and inventories of components during the build process.

Star 历史

dockerbuild-push-action

Name: docker/build-push-action
Author: docker

View on GitHub

5,314 星标722 分支TypeScriptApache-2.04 次浏览github.com/marketplace/actions/build-and-push-docker-images

Build Push Action

Features

Multi-Architecture Images - Provides a comprehensive system for building and bundling container images for multiple CPU architectures and operating systems.
Automated Image Build Pipelines - Automates the end-to-end process of building multi-platform images and pushing them to OCI registries.
BuildKit-Based Builds - Utilizes the BuildKit engine via Buildx to perform efficient, concurrent container image construction.
Cross-Platform Build Targets - Enables the specification of multiple hardware architectures as target platforms for the build process.
OCI Container Registry Clients - Implements an automated process for uploading container images to OCI-compliant registries with custom tagging.
Docker Image Builds - Automates the build and push cycle of Docker images as a core part of the CI pipeline.
Docker Container Deployments - Integrates the image creation process into GitHub Actions to ensure images are ready for deployment.
Multi-Platform Builds - Generates container images targeting multiple hardware architectures and operating systems for broad device compatibility.
SBOM Attestation Generation - Generates verifiable software bills of materials and provenance attestations for supply chain security.
Software Supply Chain Security - Secures the software supply chain by generating SBOMs and provenance attestations for container images.
Remote Cache Management - Accelerates build times by fetching and exporting layer caches to an external registry.
Build Configurations - Allows the definition of build-time variables, labels, and target stages to control image construction.
Build Context Resolution - Allows source code to be fetched directly from Git URIs to serve as the build context.
Remote Build Caches - Accelerates builds by exporting and importing layer caches via external OCI registries.
Build Context Injectors - Manages the inclusion of local files and remote Git references within the container build context.
Build Configuration - Provides configuration settings to define how source files and build modes are handled.
Build Cache Optimizations - Optimizes image construction speed through remote caching and specialized build-time mounts.
Container Image Tagging - Implements a metadata-driven system for applying version tags and labels to the resulting container images.
Secret Injection Mechanisms - Injects sensitive credentials into the build process using temporary mounts to prevent secrets from persisting in image layers.
Secret Mounts - Injects sensitive credentials into the build process using ephemeral mounts to keep them out of image layers.
Container Image Metadata - Attaches custom labels, version tags, and provenance records to the resulting container images.
Software Bill of Materials Generators - Automatically generates comprehensive software bills of materials and inventories of components during the build process.

Build Push Action 的开源替代方案

相似的开源项目，按与 Build Push Action 的功能重合度排序。

werf/werf
werf/werf
4,695在 GitHub 上查看
Werf is a container image builder, Kubernetes continuous delivery tool, and deployment orchestrator. It creates container images using Dockerfiles or assembly syntax and manages the automated rollout of applications to Kubernetes clusters by translating package definitions into resource manifests. The system differentiates itself through a multi-architecture build pipeline that integrates system emulators to produce images for different CPU architectures on a single host. It employs content-based tagging and layer caching to avoid uploading redundant image layers to remote registries. Beyond
Go
在 GitHub 上查看4,695
anchore/syft
anchore/syft
8,399在 GitHub 上查看
Syft is a software bill of materials generator, container image scanner, and software dependency catalog. It analyzes container images and filesystems to produce comprehensive inventories of installed packages and dependencies in standard formats. Additionally, it serves as a software attestation tool and an SBOM format converter. The project distinguishes itself through the ability to create cryptographically signed attestations for software inventories to ensure provenance and integrity. It also provides the capability to transform software bills of materials between different industry sche
Gocontainerscyclonedxdocker
在 GitHub 上查看8,399
ko-build/ko
ko-build/ko
8,455在 GitHub 上查看
Ko is a daemonless container image builder and OCI image generator specifically for Go applications. It compiles Go source code into binaries and packages them directly into container images, pushing them to registries without requiring a local container runtime or daemon. The tool specializes in multi-platform image distribution, producing images for various CPU architectures and operating systems from a single execution. It distinguishes itself by automating the entire pipeline from Go import paths to Kubernetes deployment or serverless function packaging for architectures like AWS Lambda.
Gocontainercontainersdeploy
在 GitHub 上查看8,455

常见问题解答

docker/build-push-action 是做什么的？

docker/build-push-action 的主要功能有哪些？

docker/build-push-action 的主要功能包括：Multi-Architecture Images, Automated Image Build Pipelines, BuildKit-Based Builds, Cross-Platform Build Targets, OCI Container Registry Clients, Docker Image Builds, Docker Container Deployments, Multi-Platform Builds。

docker/build-push-action 有哪些开源替代品？

docker/build-push-action 的开源替代品包括： werf/werf — Werf is a container image builder, Kubernetes continuous delivery tool, and deployment orchestrator. It creates… anchore/syft — Syft is a software bill of materials generator, container image scanner, and software dependency catalog. It analyzes… ko-build/ko — Ko is a daemonless container image builder and OCI image generator specifically for Go applications. It compiles Go… yeasy/docker_practice — This project is a Docker educational resource and a collection of practical examples designed for learning… orbstack/orbstack — OrbStack is a native macOS application that replaces Docker Desktop, providing an all-in-one environment for running… rust-lang/cargo — Cargo is the official build system and package manager for the Rust programming language. It provides a unified…