feat(ci): parameterize consensus client docker images in integration tests

Introduce a `consensus_image` input in the checkpoint-sync action and use matrix strategy in `integration.yaml` to pass specific Docker images for each consensus client and network combination. This allows for testing against pinned versions instead of relying on `:latest` tags, improving test stability and reproducibility.

Author: samcm

.github/actions/checkpoint-sync/action.yaml

@@ -11,6 +11,9 @@ inputs:
   beacon_node_url:
     description: "The beacon node API URL to use"
     required: true
+  consensus_image:
+    description: "The docker image to use for the consensus client"
+    required: true
 
 runs:
   using: composite
@@ -183,35 +186,35 @@ runs:
       if:  ${{ inputs.consensus == 'teku' }}
       run: |
         echo "Starting Teku...";
-        docker run -p 5052:5052 -d --name beacon --network eth -e TEKU_REST_API_ENABLED=true -e TEKU_P2P_PORT=9000 consensys/teku:latest --rest-api-port=5052 --network=${{ inputs.network }} --log-destination=CONSOLE --initial-state=http://checkpointz:5555/eth/v2/debug/beacon/states/finalized --ee-endpoint=http://102.10.10.1:8545
+        docker run -p 5052:5052 -d --name beacon --network eth -e TEKU_REST_API_ENABLED=true -e TEKU_P2P_PORT=9000 ${{ inputs.consensus_image }} --rest-api-port=5052 --network=${{ inputs.network }} --log-destination=CONSOLE --initial-state=http://checkpointz:5555/eth/v2/debug/beacon/states/finalized --ee-endpoint=http://102.10.10.1:8545
         echo "Teku is running.";
     - name: Run lighthouse client
       shell: bash
       if:  ${{ inputs.consensus == 'lighthouse' }}
       run: |
         echo "Starting Lighthouse...";
-        docker run -p 5052:5052 --network eth -d --name beacon sigp/lighthouse:latest lighthouse bn --network=${{ inputs.network }} --datadir=/data --checkpoint-sync-url=http://checkpointz:5555 --http --http-address=0.0.0.0 --execution-endpoint=http://localhost:8545 --execution-jwt-secret-key=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+        docker run -p 5052:5052 --network eth -d --name beacon ${{ inputs.consensus_image }} lighthouse bn --network=${{ inputs.network }} --datadir=/data --checkpoint-sync-url=http://checkpointz:5555 --http --http-address=0.0.0.0 --execution-endpoint=http://localhost:8545 --execution-jwt-secret-key=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
         echo "Lighthouse is running.";
     - name: Run prysm
       shell: bash
       if:  ${{ inputs.consensus == 'prysm' }}
       run: |
         echo "Starting prysm...";
-        docker run -d --name beacon --network eth -p 5052:5052 gcr.io/prysmaticlabs/prysm/beacon-chain:latest --datadir=/data --accept-terms-of-use --${{ inputs.network }} --clear-db --grpc-gateway-port=5052 --grpc-gateway-host=0.0.0.0 --execution-endpoint=http://localhost:8545 --force-clear-db --checkpoint-sync-url=http://checkpointz:5555 --genesis-beacon-api-url=http://checkpointz:5555 --grpc-gateway-port=5052
+        docker run -d --name beacon --network eth -p 5052:5052 ${{ inputs.consensus_image }} --datadir=/data --accept-terms-of-use --${{ inputs.network }} --clear-db --grpc-gateway-port=5052 --grpc-gateway-host=0.0.0.0 --execution-endpoint=http://localhost:8545 --force-clear-db --checkpoint-sync-url=http://checkpointz:5555 --genesis-beacon-api-url=http://checkpointz:5555 --grpc-gateway-port=5052
         echo "Prysm is running.";
     - name: Run nimbus
       shell: bash
       if:  ${{ inputs.consensus == 'nimbus' }}
       run: |
         echo "Starting nimbus...";
-        docker run --name beacon --network eth statusim/nimbus-eth2:amd64-latest trustedNodeSync --network=${{ inputs.network }} --trusted-node-url=http://checkpointz:5555 --backfill=false
+        docker run --name beacon --network eth ${{ inputs.consensus_image }} trustedNodeSync --network=${{ inputs.network }} --trusted-node-url=http://checkpointz:5555 --backfill=false
         echo "Nimbus is running.";
     - name: Run lodestar
       shell: bash
       if:  ${{ inputs.consensus == 'lodestar' }}
       run: |
         echo "Starting lodestar...";
-        docker run --name beacon -d --network eth -p 5052:5052 chainsafe/lodestar beacon --dataDir /data --network ${{ inputs.network }} --checkpointSyncUrl=http://checkpointz:5555  --rest --rest.address 0.0.0.0  --rest.port=5052
+        docker run --name beacon -d --network eth -p 5052:5052 ${{ inputs.consensus_image }} beacon --dataDir /data --network ${{ inputs.network }} --checkpointSyncUrl=http://checkpointz:5555  --rest --rest.address 0.0.0.0  --rest.port=5052
         echo "Lodestar is running.";
     - name: Wait for consensus client to have checkpoint synced
       shell: bash

.github/workflows/integration.yaml

@@ -12,8 +12,19 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        consensus: [lighthouse, teku, prysm, nimbus, lodestar]
-        network: [mainnet, holesky]
+        include:
+          # Mainnet
+          - {consensus: lighthouse, network: mainnet, image: 'sigp/lighthouse:latest'}
+          - {consensus: teku, network: mainnet, image: 'consensys/teku:latest'}
+          - {consensus: prysm, network: mainnet, image: 'gcr.io/prysmaticlabs/prysm/beacon-chain:latest'}
+          - {consensus: nimbus, network: mainnet, image: 'statusim/nimbus-eth2:amd64-latest'}
+          - {consensus: lodestar, network: mainnet, image: 'chainsafe/lodestar:latest'}
+          # Holesky
+          - {consensus: lighthouse, network: holesky, image: 'sigp/lighthouse:v8.0.0-rc.0'}
+          - {consensus: teku, network: holesky, image: 'consensys/teku:25.9.3'}
+          - {consensus: prysm, network: holesky, image: 'gcr.io/prysmaticlabs/prysm/beacon-chain:v6.1.1'}
+          - {consensus: nimbus, network: holesky, image: 'statusim/nimbus-eth2:amd64-v25.9.2'}
+          - {consensus: lodestar, network: holesky, image: 'chainsafe/lodestar:v1.35.0-rc.1'}
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
@@ -22,6 +33,7 @@ jobs:
         run: |
           echo "Consensus: ${{ matrix.consensus }}"
           echo "Network: ${{ matrix.network }}"
+          echo "Image: ${{ matrix.image }}"
       - name: Set beacon node URL
         id: set-url
         run: |
@@ -36,4 +48,5 @@ jobs:
         with:
           consensus: ${{ matrix.consensus }}
           network: ${{ matrix.network }}
-          beacon_node_url: ${{ steps.set-url.outputs.beacon_node_url }}
+          beacon_node_url: ${{ steps.set-url.outputs.beacon_node_url }}
+          consensus_image: ${{ matrix.image }}