feat(template_gitops): add docker-build-outputs input for DHI support (#385)

* feat(template_gitops): add docker-build-outputs input for DHI support

- Add docker-build-outputs input parameter to expose compression settings
- Update gitops-github-action from v6.4 to v6.5 (required for docker-build-outputs)
- Pass docker-build-outputs to the underlying action

This enables DHI (Docker Hardened Images) compatibility by allowing callers
to specify compression settings like:
  docker-build-outputs: type=registry,push=true,compression=gzip,force-compression=true

* docs: add docker-build-outputs to GitOps example in README

Author: timdittler

.github/workflows/template_gitops.yml

@@ -13,6 +13,10 @@ on:
       docker-build-target:
         required: false
         type: string
+      docker-build-outputs:
+        required: false
+        type: string
+        description: "Custom output destinations for docker build (e.g., type=registry,push=true,compression=gzip,force-compression=true). Required for DHI images."
       docker-build-provenance:
         required: false
         type: string
@@ -127,6 +131,7 @@ jobs:
           docker-build-secrets: ${{ secrets.docker-build-secrets }}
           docker-build-secret-files: ${{ secrets.docker-build-secret-files }}
           docker-build-target: ${{ inputs.docker-build-target }}
+          docker-build-outputs: ${{ inputs.docker-build-outputs }}
           docker-build-provenance: ${{ inputs.docker-build-provenance }}
           docker-disable-retagging: ${{ inputs.docker-disable-retagging }}
           docker-file: ${{ inputs.docker-file }}

README.md

@@ -223,6 +223,8 @@ jobs:
         "any important args"
       # optional: set the target stage to build
       docker-build-target: 'any target'
+      # optional: custom output destinations for docker build (e.g., type=registry,push=true,compression=gzip,force-compression=true). Required for DHI images.
+      docker-build-outputs: '<your-output-settings>'
       # optional: set the provenance level of the docker build, default: "false"
       docker-build-provenance: '<your-provenance-level>'
       # optional: should the last stage image be retagged for the release image, default: false