Repository navigation
Set image digest in output #286
Description
I need to have pushed image digest so it can be signed with cosign.
Example action step:
- name: Sign the published Docker image
if: ${{ github.event_name != 'pull_request' }}
env:
TAGS: ${{ steps.meta.outputs.tags }}
DIGEST: ${{ steps.build-and-push.outputs.digest }}
# This step uses the identity token to provision an ephemeral certificate
# against the sigstore community Fulcio instance.
run: echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
Activity
chrmarti commentedon Apr 2, 2024
I don't see a way of getting this from
docker buildx build, so the action or the CLI would have to extract the digest.I suggest you do this in your build script by adding a unique tag with the
imageTaginput (which accepts a comma separated list in case you already use it) of the devcontainer action and using that tag to look up the digest fromdocker inspect.Clockwork-Muse commentedon Sep 8, 2026
Christof Marti (@chrmarti) - Metadata output information can now be output into a metadata file