Tõnis Tiigi
Tõnis Tiigi
You need to define your build dependencies locally, eg. for `alpine:latest` your need to `docker pull alpine:latest` or your need to define them with immutable digests. Otherwise builder needs to...
please post a runnable reproducer
opened https://github.com/grpc/grpc-go/issues/4722
If someone can make a reproducer using `--cache-to` that fails in a similar way @awakecoding did to `-o type=local` with a reproducible system, I could look if it is similar....
I don’t see added security value in this for the users. The build still happens in our workflow (and that creates the source connection to github that we already store...
If this is just info for the user then they can already get it plainly from that URL. We also put this info into our build artifacts(binaries/images) during build. If...
@laurentsimon There is a dev branch on top of https://github.com/moby/buildkit/pull/2935 in https://github.com/moby/buildkit/compare/6b4e30052bb15cad4ab4f8c589d493a905495535...tonistiigi:buildkit:attestations-provenance to allow tracking the build from sources to the result. It's in early state with many missing things...
Related from #buildkit slack
cc @cpuguy83
@ciaranmcnulty This is ambiguous. ``` target "${flavour}-php-${version}" { dockerfile = "${flavour}/Dockerfile" args = { PHP_VERSION = "${version}" } } target "${foo}-php-${bar}${baz}" { dockerfile = "Dockerfile" args = { FOO_VERSION =...