Skip to content

Commit

Permalink
ci: redact non-reproducible annotations of container
Browse files Browse the repository at this point in the history
Prior to this patch, only the layers itself are reproducible,
but not the manifests. By that, rebuilders (e.g. via github
action in forks) will generate manifests with a different digest.
The reason for that are non-reproducible annotations in the manifests.

This patch fixes this by redacting the problematic annotations.

Signed-off-by: Felix Moessbauer <felix.moessbauer@siemens.com>
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
  • Loading branch information
fmoessbauer authored and jan-kiszka committed May 15, 2024
1 parent bc9a636 commit 16e0446
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions .github/actions/docker-init/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -65,6 +65,10 @@ runs:
annotations: |
org.opencontainers.image.description=${{ env.IMAGE_DESCRIPTION }}
org.opencontainers.image.licenses=MIT and others
# redact information that is not reproducible
org.opencontainers.image.created=
org.opencontainers.image.source=
org.opencontainers.image.url=
env:
DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index

Expand Down

0 comments on commit 16e0446

Please # to comment.