alextab93/buildx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
3,790 Commits 1 Branch 1 Tag
c5322ca727a813d748d90eae2ddeeb40b9b2ea76
Commit Graph
3790 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tonis Tiigi c5322ca727 bake: add --var flag for setting variable values 
This provides alternative way to set values for Bake
variables without adding them the global environment variables.
This can also be used then environment variable access
is disabled with BUILDX_BAKE_DISABLE_VARS_ENV_LOOKUP.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-15 23:17:28 -08:00
Tonis Tiigi 88359c58a0 tests: add TestBakeDisableEnvLookup 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-15 22:46:30 -08:00
Tõnis TiigiandGitHub 8b1f6fd8c0 Merge pull request #3600 from crazy-max/ci-sigstore-darwin 
ci: don't upload signature bundle for darwin
 2026-01-15 16:49:25 -08:00
CrazyMax f79f69b449 ci: don't upload signature bundle for darwin 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2026-01-15 12:20:48 +01:00
CrazyMaxandGitHub 9e1b08f7ca Merge pull request #3592 from tonistiigi/opa-source-policy-test-cmd 
policy: add policy test command
 2026-01-15 12:16:00 +01:00
CrazyMaxandGitHub 3da7958c8b Merge pull request #3597 from thaJeztah/bump_logrus 
vendor: github.com/sirupsen/logrus v1.9.4
 2026-01-15 12:14:53 +01:00
Sebastiaan van Stijn 99b8143e28 vendor: github.com/sirupsen/logrus v1.9.4 
full diff: https://github.com/sirupsen/logrus/compare/dd1b4c2e81af...v1.9.4

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2026-01-15 11:23:56 +01:00
Tõnis TiigiandGitHub b9b24359ba Merge pull request #3595 from tonistiigi/bake-var-disable 
bake: allow disabling env lookup for bake
 2026-01-14 14:54:17 -08:00
Tonis Tiigi d27c7f8e9f bake: allow disabling env lookup for bake 
Allow bake to be run in a mode where the local environment
variable values can't be captured by bake definition.

In future we will likely also add --var k=v for alternative
way to pass values to variables.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 14:18:26 -08:00
Tõnis TiigiandGitHub efaf9daa21 Merge pull request #3594 from tonistiigi/vendor-buildkit-v0.27.0-rc1 
vendor: update buildkit to v0.27.0-rc1
 2026-01-14 13:58:10 -08:00
Tonis Tiigi d54f398c5d vendor: update buildkit to v0.27.0-rc1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 13:36:15 -08:00
Tonis Tiigi c6ecdc08cf commands: implement policy test command 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 10:31:12 -08:00
Tõnis TiigiandGitHub 32b6b75478 Merge pull request #3593 from tonistiigi/opa-bake-tests 
policy: add policy to bake and improve test coverage
 2026-01-14 10:07:08 -08:00
Tonis Tiigi 9f1daffb32 policy: implement policy support for bake 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:34:23 -08:00
Tonis Tiigi 6f9a1cfb17 tests: add git based policy tests 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:34:15 -08:00
Tonis Tiigi 6d80e701f6 tests: add tests checking combinations of --policy flag 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:34:09 -08:00
Tonis Tiigi 071ce556a5 tests: add http based policy eval tests 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:34:01 -08:00
Tonis Tiigi 4b4f2aa682 tests: add http policy integration tests 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:33:49 -08:00
Tõnis TiigiandGitHub 5a5d59f503 Merge pull request #3539 from tonistiigi/opa-source-policy 
add rego integration to source policies
 2026-01-14 09:32:39 -08:00
Tonis Tiigi e5116c1555 tests: update policy tests matrix to require modern buildkit 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:35 -08:00
Tonis Tiigi 30b63522d1 tests: add policy eval integration tests 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:35 -08:00
Tonis Tiigi 02719d045c tests: add image and env based policy build tests 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:35 -08:00
Tonis Tiigi ae86c584b4 tests: add policy flag integration test 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:35 -08:00
Tonis Tiigi be42b48462 policy: implement policy logging via progress printer 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:34 -08:00
Tonis Tiigi 5ad09ce3eb commands: implement policy eval command 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:10:33 -08:00
Tonis Tiigi d232d4c392 commands: add stubs for policy commands 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:09:10 -08:00
Tonis Tiigi 61843e0031 policy: add strict policy config support 
Strict policy will fail if remote daemon doesn't support policy
verification.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:09:10 -08:00
Tonis Tiigi 0e1036bef5 policy: add multiple policy support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:09:10 -08:00
Tonis Tiigi 4af8cdb6af build: add --policy flag for controlling policy configuration 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:09:08 -08:00
Tonis Tiigi d0e9e8cab5 policy: add pin_image helper 
This helper can be used to pin images to specific digest to opt-out
out upgrades or replay old builds.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi df5d9eb8c2 policy: update verify_git_signature to take git object as parameter 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 8906b254d3 policy: move custom functions to separate file 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 87d4189039 policy: image signature verification support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi b2697ae933 policy: add git signature verification support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 1b7a5f2fa9 policy: add custom builtin load_json 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 70da643c58 policy: add helper modules loading 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 7247c1e38e policy: print debug helper 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:42 -08:00
Tonis Tiigi 547f1ab36b policy: add custom builtins list and remove v0 compat 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:41 -08:00
Tonis Tiigi adb9386282 policy: remove http perm/uid/gid 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:41 -08:00
Tonis Tiigi 93341aaeee add rego integration to source policies 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2026-01-14 09:03:40 -08:00
Tõnis TiigiandGitHub ee2ecd0cc8 Merge pull request #3519 from vvoland/push-nounpack 
build: Don't unpack by default when pushing
 2026-01-14 09:01:24 -08:00
Paweł Gronowski 41a1782b35 build: Don't unpack by default when pushing 
Automatically set `unpack=false` for registry exports unless explicitly
overridden by the user.

This applies to:

- `registry` exporter type (converted to `image` exporter with `push=true`)
- `--push` flag usage with image exporters

Users can still explicitly set `unpack=true` if they need local image
storage alongside registry push.

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
 2026-01-14 16:04:45 +01:00
Tõnis TiigiandGitHub e33272c855 Merge pull request #3586 from crazy-max/update-github-builder 
ci: update docker github builder to latest
 2026-01-13 11:20:13 -08:00
CrazyMaxandGitHub 90bacba395 Merge pull request #3591 from docker/dependabot/github_actions/actions/download-artifact-7 
build(deps): bump actions/download-artifact from 6 to 7
 2026-01-13 09:19:56 +01:00
Tõnis TiigiandGitHub 10784517c7 Merge pull request #3589 from crazy-max/alpine-3.23 
dockerfile: update alpine to 3.23
 2026-01-12 21:46:38 -08:00
Tõnis TiigiandGitHub 424fd833cb Merge pull request #3583 from jsternberg/oci-layout-at-sign-in-path 
build: handle at symbols in an oci-layout path
 2026-01-12 21:45:55 -08:00
dependabot[bot]andGitHub a837bb2b4c build(deps): bump actions/download-artifact from 6 to 7 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-12 22:41:17 +00:00
Jonathan A. Sternberg 2e76c05592 build: handle at symbols in an oci-layout path 
The buildx command line will now handle `@` symbols in the
`oci-layout://` path when used with named contexts. Instead of
assuming the `@` symbol is part of the reference digest, it will first
check that it is a valid reference digest. Otherwise, it will assume
it's part of the file path.

Signed-off-by: Jonathan A. Sternberg <jonathan.sternberg@docker.com>
 2026-01-12 11:19:51 -06:00
CrazyMaxandGitHub d24f69f1ad Merge pull request #3588 from crazy-max/clean-hack-scripts 
hack: move build opts to the dockerfile
 2026-01-12 11:24:47 +01:00
CrazyMaxandGitHub f86f07d74f Merge pull request #3587 from tonistiigi/dev-deps-update 
Dockerfile: update dev deps
 2026-01-12 10:05:22 +01:00