Skip to content

Commit 0d51bca

Browse files
johnsimonsjohnsimons
authored
Merge pull request #2259 from Particular/john/provenance
Improving provenance of image
2 parents 00c1e5a + 9d201b4 commit 0d51bca

File tree

3 files changed

+55
-46
lines changed

3 files changed

+55
-46
lines changed

‎.github/workflows/push-container-images.yml‎

Lines changed: 12 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -22,29 +22,28 @@ jobs:
2222
with:
2323
version: ${{ inputs.version }}
2424
- name: Log in to GitHub container registry
25-
run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
25+
uses: docker/[email protected]
26+
with:
27+
registry: ghcr.io
28+
username: ${{ github.actor }}
29+
password: ${{ secrets.GITHUB_TOKEN }}
2630
- name: Login to Docker Hub
2731
uses: docker/[email protected]
2832
with:
2933
username: ${{ secrets.DOCKERHUB_USERNAME }}
3034
password: ${{ secrets.DOCKERHUB_TOKEN }}
35+
- name: Set up Docker Buildx
36+
uses: docker/[email protected]
3137
- name: Publish to Docker Hub
3238
run: |
33-
$containers = @('servicepulse')
3439
$tags = "${{ steps.validate.outputs.container-tags }}" -Split ','
3540
$sourceTag = "${{ inputs.version }}"
3641
37-
foreach ($tag in $tags)
38-
{
39-
foreach($name in $containers)
40-
{
41-
Write-Output "::group::Pushing $($name):$($tag)"
42-
$cmd = "docker buildx imagetools create --tag particular/$($name):$($tag) ghcr.io/particular/$($name):$($sourceTag)"
43-
Write-Output "Command: $cmd"
44-
Invoke-Expression $cmd
45-
Write-Output "::endgroup::"
46-
}
47-
}
42+
$tagsCLI = $tags -replace "^", "--tag particular/servicepulse:"
43+
44+
$cmd = "docker buildx imagetools create $tagsCLI ghcr.io/particular/servicepulse:$sourceTag"
45+
Write-Output "Command: $cmd"
46+
Invoke-Expression $cmd
4847
- name: Update Docker Hub Description
4948
if: ${{ steps.validate.outputs.latest == 'true' }}
5049
uses: peter-evans/[email protected]

‎.github/workflows/release.yml‎

Lines changed: 43 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -140,28 +140,47 @@ jobs:
140140
with:
141141
version: ${{ env.MinVerVersion }}
142142
- name: Set up Docker Buildx
143-
uses: docker/setup-buildx-action@v3.7.1
143+
uses: docker/setup-buildx-action@v3.9.0
144144
- name: Log in to GitHub container registry
145-
shell: bash
146-
run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
147-
- name: Build & inspect image
148-
env:
149-
TAG_NAME: ${{ github.event_name == 'pull_request' && format('pr-{0}', github.event.number) || env.MinVerVersion }}
150-
shell: bash
151-
run: |
152-
docker buildx build --push --tag ghcr.io/particular/servicepulse:${{ env.TAG_NAME }} \
153-
--file src/ServicePulse/Dockerfile \
154-
--build-arg VERSION=${{ env.MinVerVersion }} \
155-
--annotation "index:org.opencontainers.image.title=ServicePulse" \
156-
--annotation "index:org.opencontainers.image.description=ServicePulse provides real-time production monitoring for distributed applications. It monitors the health of a system's endpoints, detects processing errors, sends failed messages for reprocessing, and ensures the specific environment's needs are met, all in one consolidated dashboard." \
157-
--annotation "index:org.opencontainers.image.created=$(date '+%FT%TZ')" \
158-
--annotation "index:org.opencontainers.image.revision=${{ github.sha }}" \
159-
--annotation "index:org.opencontainers.image.authors=Particular Software" \
160-
--annotation "index:org.opencontainers.image.vendor=Particular Software" \
161-
--annotation "index:org.opencontainers.image.version=${{ env.MinVerVersion }}" \
162-
--annotation "index:org.opencontainers.image.source=https://github.com/${{ github.repository }}/tree/${{ github.sha }}" \
163-
--annotation "index:org.opencontainers.image.url=https://hub.docker.com/r/particular/servicepulse" \
164-
--annotation "index:org.opencontainers.image.documentation=https://docs.particular.net/servicepulse/" \
165-
--annotation "index:org.opencontainers.image.base.name=mcr.microsoft.com/dotnet/aspnet:8.0-noble-chiseled-composite" \
166-
--platform linux/arm64,linux/amd64 .
167-
docker buildx imagetools inspect ghcr.io/particular/servicepulse:${{ env.TAG_NAME }}
145+
uses: docker/[email protected]
146+
with:
147+
registry: ghcr.io
148+
username: ${{ github.actor }}
149+
password: ${{ secrets.GITHUB_TOKEN }}
150+
- name: Get current date
151+
id: date
152+
run: echo "date=$(date '+%FT%TZ')" >> $GITHUB_OUTPUT
153+
- name: Build and push image to GitHub container registry
154+
uses: docker/[email protected]
155+
with:
156+
context: .
157+
push: true
158+
platforms: linux/amd64,linux/arm64
159+
sbom: true
160+
labels: |
161+
org.opencontainers.image.source=https://github.com/Particular/ServicePulse/tree/${{ github.sha }}
162+
org.opencontainers.image.authors="Particular Software"
163+
org.opencontainers.image.vendor="Particular Software"
164+
org.opencontainers.image.url=https://hub.docker.com/r/particular/servicepulse
165+
org.opencontainers.image.documentation=https://docs.particular.net/servicepulse/
166+
org.opencontainers.image.version=${{ env.MinVerVersion }}
167+
org.opencontainers.image.revision=${{ github.sha }}
168+
org.opencontainers.image.created=${{ steps.date.outputs.date }}
169+
org.opencontainers.image.title=ServicePulse
170+
org.opencontainers.image.description=ServicePulse provides real-time production monitoring for distributed applications. It monitors the health of a system's endpoints, detects processing errors, sends failed messages for reprocessing, and ensures the specific environment's needs are met, all in one consolidated dashboard.
171+
org.opencontainers.image.base.name=mcr.microsoft.com/dotnet/aspnet:8.0-noble-chiseled-composite
172+
annotations: |
173+
index:org.opencontainers.image.source=https://github.com/Particular/ServicePulse/tree/${{ github.sha }}
174+
index:org.opencontainers.image.authors="Particular Software"
175+
index:org.opencontainers.image.vendor="Particular Software"
176+
index:org.opencontainers.image.url=https://hub.docker.com/r/particular/servicepulse
177+
index:org.opencontainers.image.documentation=https://docs.particular.net/servicepulse/
178+
index:org.opencontainers.image.version=${{ env.MinVerVersion }}
179+
index:org.opencontainers.image.revision=${{ github.sha }}
180+
index:org.opencontainers.image.created=${{ steps.date.outputs.date }}
181+
index:org.opencontainers.image.title=ServicePulse
182+
index:org.opencontainers.image.description=ServicePulse provides real-time production monitoring for distributed applications. It monitors the health of a system's endpoints, detects processing errors, sends failed messages for reprocessing, and ensures the specific environment's needs are met, all in one consolidated dashboard.
183+
index:org.opencontainers.image.base.name=mcr.microsoft.com/dotnet/aspnet:8.0-noble-chiseled-composite
184+
file: src/ServicePulse/Dockerfile
185+
tags: ghcr.io/particular/servicepulse:${{ github.event_name == 'pull_request' && format('pr-{0}', github.event.number) || env.MinVerVersion }}
186+

‎src/ServicePulse/Dockerfile‎

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -16,17 +16,8 @@ RUN dotnet publish src/ServicePulse/ServicePulse.csproj -a $TARGETARCH -o /app
1616

1717
# Host runtime image
1818
FROM mcr.microsoft.com/dotnet/aspnet:8.0-noble-chiseled-composite
19-
ARG VERSION
2019
WORKDIR /app
2120

22-
LABEL org.opencontainers.image.source="https://github.com/particular/servicepulse" \
23-
org.opencontainers.image.authors="Particular Software" \
24-
org.opencontainers.image.url=https://docs.particular.net/servicepulse/ \
25-
org.opencontainers.image.documentation="https://docs.particular.net/servicepulse/" \
26-
org.opencontainers.image.version=$VERSION \
27-
org.opencontainers.image.title="ServicePulse" \
28-
org.opencontainers.image.description="ServicePulse provides real-time production monitoring for distributed applications. It monitors the health of a system's endpoints, detects processing errors, sends failed messages for reprocessing, and ensures the specific environment's needs are met, all in one consolidated dashboard."
29-
3021
ENV ASPNETCORE_HTTP_PORTS=9090
3122
EXPOSE 9090
3223
COPY --from=build /app .

0 commit comments

Comments
 (0)