From 535da79d626baa6c3f53e6b4ca9aafef8fa71365 Mon Sep 17 00:00:00 2001 From: Tonis Tiigi Date: Thu, 15 Jan 2026 22:45:08 -0800 Subject: [PATCH] policy: build policy deny messages with error Supported from Buildkit v0.27.0-rc1 Signed-off-by: Tonis Tiigi --- cmd/buildx/main.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/cmd/buildx/main.go b/cmd/buildx/main.go index 7ebf42d82..772566a84 100644 --- a/cmd/buildx/main.go +++ b/cmd/buildx/main.go @@ -16,6 +16,7 @@ import ( "github.com/docker/cli/cli/command" "github.com/docker/cli/cli/debug" solvererrdefs "github.com/moby/buildkit/solver/errdefs" + "github.com/moby/buildkit/sourcepolicy/policysession" "github.com/moby/buildkit/util/grpcerrors" "github.com/moby/buildkit/util/stack" "github.com/pkg/errors" @@ -108,6 +109,11 @@ func main() { if errors.As(err, &exitCodeErr) { os.Exit(int(exitCodeErr)) } + for _, msg := range policysession.DenyMessages(err) { + if msg.GetMessage() != "" { + fmt.Fprintf(os.Stderr, "Policy: %s\n", msg.GetMessage()) + } + } for _, s := range solvererrdefs.Sources(err) { s.Print(cmd.Err())