Repository navigation

build reusable workflow - #4

Merged

crazy-max merged 72 commits into

mainfrom

build-reusable-workflow

Nov 5, 2025

Merged

build reusable workflow#4
crazy-max merged 72 commits into
mainfrom
build-reusable-workflow

Commits on Aug 18, 2025
- build reusable workflow
  crazy-max
  committed
  9353c30
- build: set meta labels and annotations
  crazy-max
  committed
  764760b
- build: build args
  crazy-max
  committed
  5f1cddf
- build: build platforms
  crazy-max
  committed
  717a2c9
- build: install cosign and sign image
  crazy-max
  committed
  0798ce3
- build: use oci-artifact for attestations
  crazy-max
  committed
  61af3a9
- build: step to get attestation manifest digest for signing
  crazy-max
  committed
  eadc552
- build: only sign attestation manifests
  crazy-max
  committed
  37b4f8f
Commits on Aug 19, 2025
- build: verify signatures
  crazy-max
  committed
  c7eb418
- build: verify each signature individually
  crazy-max
  committed
  d640474
- build: build-sbom input
  crazy-max
  committed
  80c78b2
- build: push by digest and create manifest in last step
  crazy-max
  committed
  82581c8
- build: use getMultilineInput from core toolkit
  crazy-max
  committed
  2da5a1f
Commits on Aug 20, 2025
- build: sign and verify only with referrers API
  crazy-max
  committed
  2abd569
- build: enforce github-actions provider for signing
  crazy-max
  committed
  934c903
Commits on Aug 21, 2025
- testing dockerhub oidc through login-action
  crazy-max
  committed
  a6745e6
- build: fix since pushing by digest
  crazy-max
  committed
  2235615
- build: show image manifest
  crazy-max
  committed
  e9fcf9a
- build: wait 3sec before verifying
  crazy-max
  committed
  3092e48
- build: fail if we can't verify the signature
  crazy-max
  committed
  5b31101
- build: don't verify each tag, just digest
  crazy-max
  committed
  f0f7db8
- build: switch push input to build-output one
  crazy-max
  committed
  00ecfae
Commits on Aug 29, 2025
- build: remove timeout on verification
  crazy-max
  committed
  cbb1824
- build: format exec
  crazy-max
  committed
  85225d9
- build: retry signature verification
  crazy-max
  committed
  f078345
- build: support local output and sign attestations blob
  crazy-max
  committed
  c69dd2b
Commits on Sep 4, 2025
- build: install latest buildx and enable buildkit debug
  crazy-max
  committed
  b52998e
- build: pin cosign installer action
  crazy-max
  committed
  cd349f2
Commits on Nov 4, 2025
- build: multi registry auths
  crazy-max
  committed
  8a7c5db
- build: update login-action
  crazy-max
  committed
  f24613e
- build: list output after build for local build
  crazy-max
  committed
  55bf27e
- build: fix signing for multi platform with local output
  crazy-max
  committed
  ea18033
- build: install cosign from sources
  crazy-max
  committed
  e4e069b
- build: clone cosign repo
  crazy-max
  committed
  e663908
- build: use cosign fork with debug on write
  crazy-max
  committed
  8a99b29
- build: cosign 2.6.0 ref
  crazy-max
  committed
  d8d8b7e
- build: use cosign installer
  crazy-max
  committed
  0860319
- build: use cosign 2.6.0-debug-oci-write branch
  crazy-max
  committed
  7f3ba6c
- build: use cosign 2.6.0-fix-oci-manifest branch
  crazy-max
  committed
  dfdfca0
- build: buildkit latest image
  crazy-max
  committed
  81636c5
- build: install cosign earlier
  crazy-max
  committed
  3309be0
- build: set github_event as provenance custom field
  crazy-max
  committed
  ee15022
- build: let buildx mount github event for provenance
  crazy-max
  committed
  27f850d
- build: less aggressive retry backoff
  crazy-max
  committed
  f4fc0a5
- build: use cosign bundle for local signature
  crazy-max
  committed
  3bb7e15
- build: add origin annotation to signing payload
  crazy-max
  committed
  939d82d
- build: use attest-blob to embed attestation in DSSE
  crazy-max
  committed
  b68a5f8
- build: use buildkit latest stable
  crazy-max
  committed
  da23358
- build: new bundle format for local
  crazy-max
  committed
  cd6f835
- build: format local cosign bundle
  crazy-max
  committed
  6124b66
- build: verify signatures for local artifacts as well
  crazy-max
  committed
  432cfba
- build: only sign provenance attestation
  crazy-max
  committed
  a7174e2
- build: slsa provenance v1
  crazy-max
  committed
  5c24e0d
- build: use actions/attest@v2 to sign local artifacts
  crazy-max
  committed
  d2a2e67
- build: use fork of actions/attest to skip wrting attestation on GH repo
  crazy-max
  committed
  9365692
- build: disable local signature verification temporarily
  crazy-max
  committed
  6893c72
- build: test not uploading to transparency log
  crazy-max
  committed
  9536b5a
- build: use cosign 3.0.2-fix-oci-manifest branch and new-bundle-format for signature manifest
  crazy-max
  committed
  67ef79b
- build: buildx pr-3453 merged
  crazy-max
  committed
  abb5893
- build: testing actions-toolkit implementation to sign blobs
  crazy-max
  committed
  ad2c478
- build: build-file input
  crazy-max
  committed
  300850c
- build: use actions-toolkit to install cosign and verify blobs signature
  crazy-max
  committed
  18f51b9
- build: use vanilla cosign v3.0.2
  crazy-max
  committed
  89c21b6
- build: use actions-toolkit to sign and verify attestation manifests
  crazy-max
  committed
  b291252
- build: cleanup workflow
  crazy-max
  committed
  41db215
- build: install actions-toolkit 0.65.0
  crazy-max
  committed
  2f92945
- build: cache and cache-mode inputs for GitHub Actions cache backend
  crazy-max
  committed
  c903453
- build: setup qemu opt
  crazy-max
  committed
  aa5750d
- build: support multiple image names
  crazy-max
  committed
  23a491f
- build: add remaining build inputs
  crazy-max
  committed
  46d1973
Commits on Nov 5, 2025
- build: update actions-toolkit to 0.67.0
  crazy-max
  committed
  144584b
- update README
  crazy-max
  committed
  5fdc350

Commits

Commits on Aug 18, 2025

Commits on Aug 19, 2025

Commits on Aug 20, 2025

Commits on Aug 21, 2025

Commits on Aug 29, 2025

Commits on Sep 4, 2025

Commits on Nov 4, 2025

Commits on Nov 5, 2025