Merge pull request #1548 from crazy-max/docs-link-secret-inputs

readme: link secret inputs to the GitHub Actions secrets guide
Merge pull request #1549 from crazy-max/ci-e2e-dockerhub-push-scope
2026-07-04 03:42:52 +08:00 · 2026-05-28 17:30:01 -07:00 · 2026-05-28 17:29:24 -07:00 · 2026-05-28 11:38:49 +02:00 · 2026-05-28 11:22:02 +02:00
2 changed files with 4 additions and 4 deletions
--- a/.github/workflows/.e2e-run.yml
+++ b/.github/workflows/.e2e-run.yml
@ -119,7 +119,7 @@ jobs:
          registry: ${{ env.REGISTRY_FQDN || inputs.registry }}
          username: ${{ env.REGISTRY_USER || secrets.registry_username }}
          password: ${{ env.REGISTRY_PASSWORD || secrets.registry_password }}
-          scope: '@push'
+          scope: ${{ inputs.type == 'remote' && inputs.registry == '' && '@push' || '' }}
      -
        name: Build and push
        uses: ./
--- a/README.md
+++ b/README.md
@ -249,9 +249,9 @@ The following inputs can be used as `step.with` keys:
 | `pull`             | Bool        | Always attempt to pull all referenced images (default `false`)                                                                                                                    |
 | `push`             | Bool        | [Push](https://docs.docker.com/engine/reference/commandline/buildx_build/#push) is a shorthand for `--output=type=registry` (default `false`)                                     |
 | `sbom`             | Bool/String | Generate [SBOM](https://docs.docker.com/build/attestations/sbom/) attestation for the build (shorthand for `--attest=type=sbom`)                                                  |
-| `secrets`          | List        | List of [secrets](https://docs.docker.com/engine/reference/commandline/buildx_build/#secret) to expose to the build (e.g., `key=string`, `GIT_AUTH_TOKEN=mytoken`)                |
-| `secret-envs`      | List/CSV    | List of [secret env vars](https://docs.docker.com/engine/reference/commandline/buildx_build/#secret) to expose to the build (e.g., `key=envname`, `MY_SECRET=MY_ENV_VAR`)         |
-| `secret-files`     | List        | List of [secret files](https://docs.docker.com/engine/reference/commandline/buildx_build/#secret) to expose to the build (e.g., `key=filename`, `MY_SECRET=./secret.txt`)         |
+| `secrets`          | List        | List of [secrets](https://docs.docker.com/build/ci/github-actions/secrets/) to expose to the build (e.g., `key=string`, `GIT_AUTH_TOKEN=mytoken`)                                 |
+| `secret-envs`      | List/CSV    | List of [secret env vars](https://docs.docker.com/build/ci/github-actions/secrets/) to expose to the build (e.g., `key=envname`, `MY_SECRET=MY_ENV_VAR`)                          |
+| `secret-files`     | List        | List of [secret files](https://docs.docker.com/build/ci/github-actions/secrets/) to expose to the build (e.g., `key=filename`, `MY_SECRET=./secret.txt`)                          |
 | `shm-size`         | String      | Size of [`/dev/shm`](https://docs.docker.com/engine/reference/commandline/buildx_build/#shm-size) (e.g., `2g`)                                                                    |
 | `ssh`              | List        | List of [SSH agent socket or keys](https://docs.docker.com/engine/reference/commandline/buildx_build/#ssh) to expose to the build                                                 |
 | `tags`             | List/CSV    | List of tags                                                                                                                                                                      |
Author	SHA1	Message	Date
Tõnis Tiigi	1d0c110a5d	Merge pull request #1548 from crazy-max/docs-link-secret-inputs Some checks failed ci / multi-output (push) Has been cancelled Details ci / load-and-push (push) Has been cancelled Details ci / summary-disable (push) Has been cancelled Details ci / summary-not-supported (push) Has been cancelled Details ci / record-upload-disable (push) Has been cancelled Details ci / record-retention-days (0) (push) Has been cancelled Details ci / record-retention-days (2) (push) Has been cancelled Details ci / checks (edge) (push) Has been cancelled Details ci / checks (latest) (push) Has been cancelled Details ci / checks (v0.14.1) (push) Has been cancelled Details ci / annotations-disabled (push) Has been cancelled Details ci / call-check (push) Has been cancelled Details ci / no-default-attestations (push) Has been cancelled Details codeql / analyze (push) Has been cancelled Details e2e / build (acr, Azure Container Registry, officialgithubactions.azurecr.io, officialgithubactions.azurecr.io/test-docker-action, remote) (push) Has been cancelled Details e2e / build (artifactory, Artifactory, infradock.jfrog.io, infradock.jfrog.io/test-ghaction/build-push-action, remote) (push) Has been cancelled Details e2e / build (aws, AWS ECR Public, public.ecr.aws, public.ecr.aws/q3b5f1u4/test-docker-action, remote) (push) Has been cancelled Details e2e / build (aws, AWS ECR, 175142243308.dkr.ecr.us-east-2.amazonaws.com, 175142243308.dkr.ecr.us-east-2.amazonaws.com/sandbox/test-docker-action, remote) (push) Has been cancelled Details e2e / build (dockerhub, Docker Hub, , ghactionstest/ghactionstest, remote) (push) Has been cancelled Details e2e / build (gar, Google Artifact Registry, us-east4-docker.pkg.dev, us-east4-docker.pkg.dev/sandbox-298914/docker-official-github-actions/test-docker-action, remote) (push) Has been cancelled Details e2e / build (ghcr, GitHub, ghcr.io, ghcr.io/docker-ghactiontest/test, remote) (push) Has been cancelled Details e2e / build (gitlab, GitLab, registry.gitlab.com, registry.gitlab.com/test1716/test, remote) (push) Has been cancelled Details e2e / build (none, distribution, Distribution, local) (push) Has been cancelled Details e2e / build (none, harbor, Harbor, local) (push) Has been cancelled Details e2e / build (none, nexus, Nexus, local) (push) Has been cancelled Details e2e / build (quay, Quay, quay.io, quay.io/docker_build_team/ghactiontest, remote) (push) Has been cancelled Details test / test (push) Has been cancelled Details validate / prepare (push) Has been cancelled Details zizmor / zizmor (push) Has been cancelled Details validate / validate (push) Has been cancelled Details readme: link secret inputs to the GitHub Actions secrets guide	2026-05-28 17:30:01 -07:00
Tõnis Tiigi	8db8ba8e45	Merge pull request #1549 from crazy-max/ci-e2e-dockerhub-push-scope ci(e2e): limit push-scoped login to Docker Hub	2026-05-28 17:29:24 -07:00
CrazyMax	77c0af9da9	ci(e2e): limit push-scoped login to Docker Hub Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-05-28 11:38:49 +02:00
CrazyMax	2258452e7c	readme: link secret inputs to the GitHub Actions secrets guide Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-05-28 11:22:02 +02:00