GitNexus

mirror of https://github.com/abhigyanpatwari/GitNexus.git synced 2026-09-08 22:22:52 +00:00

History

Gergo Magyar 5b1966c2ca ci(docker): add retry wrapper for build-push with visibility and hardened shell Wraps docker/build-push-action with a local composite action that retries once on failure (upstream keeps retry out of the action per docker/build-push-action#1422). Adds ignore-error=true on cache-to so GHA cache export flakes don't fail an otherwise successful push. - Emit `::notice::` in the resolve step when attempt 2 recovers from a first-attempt failure, so silent retries are grep-able in run logs and trending registry/cache flakes stay visible. - Bind `retry-wait-seconds` via `env:` in the backoff step to match the env-binding convention used elsewhere in docker.yml (TAG_INPUT, DIGEST, TAGS) — no direct expression interpolation inside shell bodies. Preserves existing contract end-to-end: SHA pin, provenance=max, sbom=true, dual-registry push, `steps.build.outputs.digest` wiring to Cosign and the build-provenance attestations.	2026-04-24 09:22:23 +01:00
..
action.yml	ci(docker): add retry wrapper for build-push with visibility and hardened shell	2026-04-24 09:22:23 +01:00

Gergo Magyar 5b1966c2ca ci(docker): add retry wrapper for build-push with visibility and hardened shell

Wraps docker/build-push-action with a local composite action that retries
once on failure (upstream keeps retry out of the action per
docker/build-push-action#1422). Adds ignore-error=true on cache-to so GHA
cache export flakes don't fail an otherwise successful push.

- Emit `::notice::` in the resolve step when attempt 2 recovers from a
  first-attempt failure, so silent retries are grep-able in run logs and
  trending registry/cache flakes stay visible.
- Bind `retry-wait-seconds` via `env:` in the backoff step to match the
  env-binding convention used elsewhere in docker.yml (TAG_INPUT, DIGEST,
  TAGS) — no direct expression interpolation inside shell bodies.

Preserves existing contract end-to-end: SHA pin, provenance=max, sbom=true,
dual-registry push, `steps.build.outputs.digest` wiring to Cosign and the
build-provenance attestations.

2026-04-24 09:22:23 +01:00

action.yml

ci(docker): add retry wrapper for build-push with visibility and hardened shell

2026-04-24 09:22:23 +01:00