suyiiyii/yq
1
0
Fork 0
mirror of https://github.com/mikefarah/yq.git synced 2026-08-31 13:05:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

Process for SHA-pin github action

Browse Source
This commit is contained in:
Mike Farah
2026-06-07 18:19:13 +10:00
parent 0eebc242fb
commit 26434e221e
4 changed files with 39 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/docker-githubaction.yml
+7
View File
@@ -98,3 +98,10 @@ jobs:
-t "ghcr.io/${IMAGE_NAME}:4-githubaction" \
-t "ghcr.io/${IMAGE_NAME}:latest-githubaction" \
.
- name: Report action.yml digest to pin
run: |
GITHUBACTION_DIGEST=$(docker buildx imagetools inspect "${IMAGE_NAME}:4-githubaction" --format '{{printf "%s" .Manifest.Digest}}')
echo "Published ${IMAGE_NAME}:4-githubaction at ${GITHUBACTION_DIGEST}"
echo "Update action.yml image to:"
echo " docker://${IMAGE_NAME}:4-githubaction@${GITHUBACTION_DIGEST}"