vishnu-prasad-wdt
21e961d4f0
All checks were successful
Self-test kaniko-build / build-without-push (push) Successful in 7s
Lets any repository on git.scotty-world.com build a Docker/OCI image from its checked-out code and push it to the registry it chooses (scotty-git's own container registry, Artifact Registry, Docker Hub, GHCR, ...). Kaniko instead of docker build: the runner is a shared, long-lived VM, so giving workflows the Docker daemon would mean root on that machine and image layers left on its disk. Kaniko builds inside the step's own container: no root, no privileged mode, nothing left behind. Kaniko v1.23.2 is pinned by digest. The action stores no credentials; each repository passes its own secret. A self-test workflow builds a small image (without pushing) on every change. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
23 lines
616 B
YAML
23 lines
616 B
YAML
name: Self-test kaniko-build
|
|
|
|
# Builds a tiny image with the action in this repo, without pushing, so a broken change to
|
|
# kaniko-build/ shows up here before any user's workflow picks it up.
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
pull_request:
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
build-without-push:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- name: Build the test image (no push)
|
|
uses: ./kaniko-build
|
|
with:
|
|
context: kaniko-build/test
|
|
dockerfile: kaniko-build/test/Dockerfile
|
|
push: "false"
|
|
build_args: |
|
|
GREETING=selftest
|