GitHub Action: docker-build-push

Build Docker image and push it

Introduction

Build Docker image and push it.

Usage

  name: Push into main branch
  on:
    push:
      branches: [ master ]

  jobs:
    context:
      runs-on: ubuntu-latest
      steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Build
        id: build
        uses: cloudposse/github-action-docker-build-push@main
        with:
          registry: registry.hub.docker.com
          organization: "${{ github.event.repository.owner.login }}"
          repository: "${{ github.event.repository.name }}"
          login: "${{ secrets.DOCKERHUB_USERNAME }}"
          password: "${{ secrets.DOCKERHUB_PASSWORD }}"
          platforms: linux/amd64,linux/arm64

    outputs:
      image: ${{ steps.build.outputs.image }}
      tag: ${{ steps.build.outputs.tag }}

tip

If omitted, cache-from and cache-to will default to gha. In an AWS environment, we recommend using ECR as a remote cache.

     - name: Build
       id: build
       uses: cloudposse/github-action-docker-build-push@main
       with:
        registry: registry.hub.docker.com
        organization: "${{ github.event.repository.owner.login }}"
        repository: "${{ github.event.repository.name }}"
+       cache-from: "type=registry,ref=registry.hub.docker.com/${{ github.event.repository.owner.login }}/${{ github.event.repository.name }}:cache"
+       cache-to: "mode=max,image-manifest=true,oci-mediatypes=true,type=registry,ref=registry.hub.docker.com/${{ github.event.repository.owner.login }}/${{ github.event.repository.name }}:cache"

Inputs

Name	Description	Default	Required
allow	List of extra privileged entitlement (e.g., network.host,security.insecure)	N/A	false
binfmt-image	Binfmt image	public.ecr.aws/eks-distro-build-tooling/binfmt-misc:qemu-v7.0.0	false
build-args	List of build-time variables	N/A	false
build-contexts	List of additional build contexts (e.g., name=path)	N/A	false
buildkitd-flags	BuildKit daemon flags	--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host	false
cache-from	List of external cache sources for buildx (e.g., user/app:cache, type=local,src=path/to/dir)	type=gha	false
cache-to	List of cache export destinations for buildx (e.g., user/app:cache, type=local,dest=path/to/dir)	type=gha,mode=max	false
debug	Enable debug mode	false	false
docker-metadata-pr-head-sha	Set to true to tag images with the PR HEAD SHA instead of the merge commit SHA within pull requests.	false	false
driver-opts	List of additional driver-specific options. (eg. image=moby/buildkit:master)	image=public.ecr.aws/vend/moby/buildkit:buildx-stable-1	false
file	Dockerfile name	Dockerfile	false
image_name	Image name (excluding registry). Defaults to {{$organization/$repository}}.		false
inspect	Set to true will pull and inspect the image and output it to the step summary.	false	false
login	Docker login		false
network	Set the networking mode for the RUN instructions during build	N/A	false
no-cache	Send the --no-cache flag to the docker build process	false	false
organization	Organization	N/A	true
password	Docker password		false
platforms	List of target platforms for build (e.g. linux/amd64,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,etc)	linux/amd64	false
provenance	Generate provenance attestation for the build	N/A	false
registry	Docker registry	N/A	true
repository	Repository	N/A	true
secret-files	List of secret files to expose to the build (e.g., key=filename, MY_SECRET=./secret.txt)	N/A	false
secrets	List of secrets to expose to the build (e.g., key=string, GIT_AUTH_TOKEN=mytoken)	N/A	false
ssh	List of SSH agent socket or keys to expose to the build	N/A	false
tags	List of tags (supports https://github.com/docker/metadata-action#tags-input)	N/A	false
target	Sets the target stage to build		false
workdir	Working directory	./	false

Outputs

Name	Description
image	Docker image name
metadata	Docker image metadata
tag	Docker image tag