Skip to content

README.md

Latest commit

 

History

History
87 lines (54 loc) · 3.17 KB

README.md

File metadata and controls

87 lines (54 loc) · 3.17 KB
Raw

Docker Image Workflows

Build and Publish

Features:

  • Multi-platform builds (linux/amd64, linux/arm64 by default)
  • Automatic repository naming based on group name
  • OIDC authentication with JFrog
  • Flexible build configuration (context, dockerfile path, build args, secrets)
  • Build attestation support
  • Custom additional tags

JFrog Artifactory

The workflow for building and publishing Docker images to JFrog Artifactory.

Implementation: .github/workflows/docker-build-push-jfrog.yaml

Simple Example: examples/docker/build-push-jfrog-simple.yml Complete Example: examples/docker/build-push-jfrog-complete.yml Build secrets from Infisical: examples/docker/build-push-jfrog-infisical-secrets.yml

Build-time secrets from Infisical

Set infisical_env_slug and infisical_secret_path and pass the infisical_identity_id / infisical_project_id secrets. The workflow loads that path over GitHub OIDC (values masked) before the build, so docker_secret_envs can name the exported variables and BuildKit receives them as --mount=type=secret in the Dockerfile. Nothing lands in a layer or in the build args.

Builds whose stages FROM a private registry image, or that consume a secret, should also set cache_from: "" and cache_to: "": the default type=gha,mode=max exports every stage's layers into the repository's Actions cache, which any workflow run in the repository can restore.

Docker Hub

The workflow for building and publishing Docker images to Docker Hub.

Implementation: .github/workflows/docker-build-push-dockerhub.yaml

Simple Example: examples/docker/build-push-dockerhub-simple.yml Complete Example: examples/docker/build-push-dockerhub-complete.yml

Promote

The workflow for promoting Docker images between environments (dev → staging → prod).

Features:

  • Promotes images between environments
  • Maintains build provenance attestation
  • Supports multiple tags promotion
  • Detailed promotion summary

JFrog Artifactory

Implementation: .github/workflows/docker-promote-jfrog.yaml

Example: examples/docker/promote-jfrog.yml

Docker Hub

Implementation: .github/workflows/docker-promote-dockerhub.yaml Example: examples/docker/promote-dockerhub.yml

Environment Flow - JFrog Artifactory

Docker images follow this promotion path:

dev (build) → staging (promotion) → prod (promotion)

Each environment has its own Artifactory repository:

  • {group}-oci-local-dev
  • {group}-oci-local-staging
  • {group}-oci-local-prod

Environment Flow - Docker Hub

Docker images follow this promotion path:

dev (build) → prod (promotion)

Each environment has its own Docker Hub repository:

  • dev -> nethermindeth
  • prod -> nethermind