Skip to content

use github-builder-runtime package #218

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
crazy-max wants to merge 3 commits into
base: main
Choose a base branch
from
+203 −77
Open

use github-builder-runtime package #218

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
1304b83
use github-builder-runtime package
crazy-max May 26, 2026
e1d8a82
chore(deps): update github-builder-runtime module to 0.91.0
crazy-max May 27, 2026
bda8667
retry runtime npm installs in workflows
crazy-max May 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
33 changes: 18 additions & 15 deletions .github/workflows/.update-deps.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ jobs:
- sbom
- binfmt
- cosign
- toolkit
- runtime
steps:
-
name: GitHub auth token from GitHub App
Expand Down Expand Up @@ -161,26 +161,29 @@ jobs:
};
}
},
toolkit: {
key: 'DOCKER_ACTIONS_TOOLKIT_MODULE',
name: 'actions-toolkit module',
branch: 'deps/docker-actions-toolkit-module',
runtime: {
key: 'RUNTIME_MODULE',
name: 'github-builder-runtime module',
branch: 'deps/docker-github-builder-runtime-module',
files: [
'.github/workflows/build.yml',
'.github/workflows/bake.yml',
'.github/workflows/verify.yml'
],
sourceUrl: 'https://github.com/docker/actions-toolkit/releases/latest',
async resolve({github}) {
const release = await github.rest.repos.getLatestRelease({
owner: 'docker',
repo: 'actions-toolkit'
});
const tag = release.data.tag_name;
const version = stripLeadingV(tag);
sourceUrl: 'https://www.npmjs.com/package/@docker/github-builder-runtime',
async resolve() {
const response = await fetch('https://registry.npmjs.org/@docker%2fgithub-builder-runtime/latest');
if (!response.ok) {
throw new Error(`Unable to resolve latest @docker/github-builder-runtime package: ${response.status} ${response.statusText}`);
}
const payload = await response.json();
const version = payload?.version;
if (!version) {
throw new Error('Unable to resolve latest @docker/github-builder-runtime package version from npm');
}
return {
value: `@docker/actions-toolkit@${version}`,
from: tag,
value: `@docker/github-builder-runtime@${version}`,
from: version,
to: version
};
}
Expand Down
107 changes: 78 additions & 29 deletions .github/workflows/bake.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -161,7 +161,16 @@ env:
BUILDKIT_IMAGE: "moby/buildkit:v0.30.0"
SBOM_IMAGE: "docker/buildkit-syft-scanner:1.11.0"
BINFMT_IMAGE: "tonistiigi/binfmt:qemu-v10.2.1-65"
DOCKER_ACTIONS_TOOLKIT_MODULE: "@docker/actions-toolkit@0.90.0"
RUNTIME_MODULE: "@docker/github-builder-runtime@0.91.0"
RUNTIME_INSTALL_ARGS: |
--loglevel=error
--no-save
--package-lock=false
--ignore-scripts
--omit=dev
--prefer-offline
--fund=false
--audit=false
COSIGN_VERSION: "v3.0.6"
LOCAL_EXPORT_DIR: "/tmp/buildx-output"
MATRIX_SIZE_LIMIT: "20"
Expand All @@ -181,19 +190,34 @@ jobs:
name: Install dependencies
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
INPUT_DAT-MODULE: ${{ env.DOCKER_ACTIONS_TOOLKIT_MODULE }}
INPUT_RUNTIME-MODULE: ${{ env.RUNTIME_MODULE }}
INPUT_RUNTIME-INSTALL-ARGS: ${{ env.RUNTIME_INSTALL_ARGS }}
with:
script: |
await exec.exec('npm', ['install', '--prefer-offline', '--ignore-scripts', core.getInput('dat-module')]);
const npmArgs = ['install', ...core.getMultilineInput('runtime-install-args'), core.getInput('runtime-module')];
const maxAttempts = 3;
for (let attempt = 1; attempt <= maxAttempts; attempt++) {
const exitCode = await exec.exec('npm', npmArgs, {ignoreReturnCode: true});
if (exitCode === 0) {
return;
}
if (attempt === maxAttempts) {
core.setFailed(`npm install failed after ${maxAttempts} attempts`);
return;
}
const retryDelayMs = attempt * 50;
core.info(`npm install failed with exit code ${exitCode}; retrying in ${retryDelayMs}ms`);
await new Promise(resolve => setTimeout(resolve, retryDelayMs));
}
-
name: Install Cosign
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
INPUT_COSIGN-VERSION: ${{ env.COSIGN_VERSION }}
with:
script: |
const { Cosign } = require('@docker/actions-toolkit/lib/cosign/cosign');
const { Install } = require('@docker/actions-toolkit/lib/cosign/install');
const { Cosign } = require('@docker/github-builder-runtime/lib/cosign/cosign');
const { Install } = require('@docker/github-builder-runtime/lib/cosign/install');

const inpCosignVersion = core.getInput('cosign-version');

Expand All @@ -218,8 +242,8 @@ jobs:
${{ env.BINFMT_IMAGE }}
with:
script: |
const { OCI } = require('@docker/actions-toolkit/lib/oci/oci');
const { Sigstore } = require('@docker/actions-toolkit/lib/sigstore/sigstore');
const { OCI } = require('@docker/github-builder-runtime/lib/oci/oci');
const { Sigstore } = require('@docker/github-builder-runtime/lib/sigstore/sigstore');

const sigstore = new Sigstore();

Expand Down Expand Up @@ -268,10 +292,10 @@ jobs:
with:
script: |
const os = require('os');
const { Bake } = require('@docker/actions-toolkit/lib/buildx/bake');
const { Build } = require('@docker/actions-toolkit/lib/buildx/build');
const { GitHub } = require('@docker/actions-toolkit/lib/github/github');
const { Util } = require('@docker/actions-toolkit/lib/util');
const { Bake } = require('@docker/github-builder-runtime/lib/buildx/bake');
const { Build } = require('@docker/github-builder-runtime/lib/buildx/build');
const { GitHub } = require('@docker/github-builder-runtime/lib/github/github');
const { Util } = require('@docker/github-builder-runtime/lib/util');

const inpSbomImage = core.getInput('sbom-image');
const inpMatrixSizeLimit = parseInt(core.getInput('matrix-size-limit'), 10);
Expand Down Expand Up @@ -592,15 +616,25 @@ jobs:
name: Install dependencies
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
INPUT_DAT-MODULE: ${{ env.DOCKER_ACTIONS_TOOLKIT_MODULE }}
INPUT_RUNTIME-MODULE: ${{ env.RUNTIME_MODULE }}
INPUT_RUNTIME-INSTALL-ARGS: ${{ env.RUNTIME_INSTALL_ARGS }}
with:
script: |
await exec.exec('npm', [
'install',
'--prefer-offline',
'--ignore-scripts',
core.getInput('dat-module')
]);
const npmArgs = ['install', ...core.getMultilineInput('runtime-install-args'), core.getInput('runtime-module')];
const maxAttempts = 3;
for (let attempt = 1; attempt <= maxAttempts; attempt++) {
const exitCode = await exec.exec('npm', npmArgs, {ignoreReturnCode: true});
if (exitCode === 0) {
return;
}
if (attempt === maxAttempts) {
core.setFailed(`npm install failed after ${maxAttempts} attempts`);
return;
}
const retryDelayMs = attempt * 50;
core.info(`npm install failed with exit code ${exitCode}; retrying in ${retryDelayMs}ms`);
await new Promise(resolve => setTimeout(resolve, retryDelayMs));
}
-
name: Docker meta
id: meta
Expand Down Expand Up @@ -712,9 +746,9 @@ jobs:
const os = require('os');
const path = require('path');

const { Buildx } = require('@docker/actions-toolkit/lib/buildx/buildx');
const { Cosign } = require('@docker/actions-toolkit/lib/cosign/cosign');
const { Install } = require('@docker/actions-toolkit/lib/cosign/install');
const { Buildx } = require('@docker/github-builder-runtime/lib/buildx/buildx');
const { Cosign } = require('@docker/github-builder-runtime/lib/cosign/cosign');
const { Install } = require('@docker/github-builder-runtime/lib/cosign/install');

const inpCosignVersion = core.getInput('cosign-version');
const inpBuilderName = core.getInput('builder-name');
Expand Down Expand Up @@ -782,9 +816,9 @@ jobs:
with:
script: |
const os = require('os');
const { Build } = require('@docker/actions-toolkit/lib/buildx/build');
const { GitHub } = require('@docker/actions-toolkit/lib/github/github');
const { Util } = require('@docker/actions-toolkit/lib/util');
const { Build } = require('@docker/github-builder-runtime/lib/buildx/build');
const { GitHub } = require('@docker/github-builder-runtime/lib/github/github');
const { Util } = require('@docker/github-builder-runtime/lib/util');

const inpPlatform = core.getInput('platform');
const platformPairSuffix = inpPlatform ? `-${inpPlatform.replace(/\//g, '-')}` : '';
Expand Down Expand Up @@ -968,7 +1002,7 @@ jobs:
INPUT_IMAGE-DIGEST: ${{ steps.get-image-digest.outputs.digest }}
with:
script: |
const { Sigstore } = require('@docker/actions-toolkit/lib/sigstore/sigstore');
const { Sigstore } = require('@docker/github-builder-runtime/lib/sigstore/sigstore');

const inpImageNames = core.getMultilineInput('image-names');
const inpImageDigest = core.getInput('image-digest');
Expand Down Expand Up @@ -1004,7 +1038,7 @@ jobs:
with:
script: |
const path = require('path');
const { Sigstore } = require('@docker/actions-toolkit/lib/sigstore/sigstore');
const { Sigstore } = require('@docker/github-builder-runtime/lib/sigstore/sigstore');
const inplocalExportDir = core.getInput('local-output-dir');

const sigstore = new Sigstore();
Expand Down Expand Up @@ -1086,10 +1120,25 @@ jobs:
name: Install dependencies
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
INPUT_DAT-MODULE: ${{ env.DOCKER_ACTIONS_TOOLKIT_MODULE }}
INPUT_RUNTIME-MODULE: ${{ env.RUNTIME_MODULE }}
INPUT_RUNTIME-INSTALL-ARGS: ${{ env.RUNTIME_INSTALL_ARGS }}
with:
script: |
await exec.exec('npm', ['install', '--prefer-offline', '--ignore-scripts', core.getInput('dat-module')]);
const npmArgs = ['install', ...core.getMultilineInput('runtime-install-args'), core.getInput('runtime-module')];
const maxAttempts = 3;
for (let attempt = 1; attempt <= maxAttempts; attempt++) {
const exitCode = await exec.exec('npm', npmArgs, {ignoreReturnCode: true});
if (exitCode === 0) {
return;
}
if (attempt === maxAttempts) {
core.setFailed(`npm install failed after ${maxAttempts} attempts`);
return;
}
const retryDelayMs = attempt * 50;
core.info(`npm install failed with exit code ${exitCode}; retrying in ${retryDelayMs}ms`);
await new Promise(resolve => setTimeout(resolve, retryDelayMs));
}
-
name: Docker meta
id: meta
Expand Down Expand Up @@ -1133,7 +1182,7 @@ jobs:
INPUT_META-ANNOTATIONS: ${{ steps.meta.outputs.annotations }}
with:
script: |
const { ImageTools } = require('@docker/actions-toolkit/lib/buildx/imagetools');
const { ImageTools } = require('@docker/github-builder-runtime/lib/buildx/imagetools');

const inpPush = core.getBooleanInput('push');
const inpImageNames = core.getMultilineInput('image-names');
Expand Down
Loading
Loading