Skip to content

STAC-24960 drop OCI base image labels#13

Draft
LouisLotter wants to merge 1 commit into
mainfrom
STAC-24960-fix-oci-base-resolution
Draft

STAC-24960 drop OCI base image labels#13
LouisLotter wants to merge 1 commit into
mainfrom
STAC-24960-fix-oci-base-resolution

Conversation

@LouisLotter

@LouisLotter LouisLotter commented Jun 8, 2026

Copy link
Copy Markdown

Summary

Stop apply-oci-labels from emitting org.opencontainers.image.base.name and org.opencontainers.image.base.digest.

Why

The Hadoop publish job was blocked because the action tried to infer base image labels from a multi-stage Dockerfile and inspected an internal stage name as if it were a registry image. The previous version of this PR fixed that specific parser case, but review feedback correctly pointed out that the reusable publish action should not grow Dockerfile detection logic just to emit optional provenance labels.

Dropping these two labels removes the Dockerfile parsing, base-image registry lookup, Buildx precondition, and source-registry login from the publish path.

Compatibility

The related inputs (dockerfile, base-name, base-digest, registry-credentials) remain defined as deprecated no-ops for now, so existing callers that still pass them do not break while downstream workflows are cleaned up.

Validation

  • ruby YAML parse for .github workflows/actions
  • go test ./... in evaluator
  • go vet ./... in evaluator
  • uvx zizmor --collect=workflows,actions,dependabot .


ARG BCI_VERSION=15.7-56.15
FROM registry.suse.com/bci/bci-micro:${BCI_VERSION}
FROM registry.suse.com/bci/bci-micro:${BCI_VERSION} AS base

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

to be honest i would simplify the whole thing by enforcing a convention. Dockerfiles that use this action should expose an argument ARG BASE_IMAGE= so that the detection is immediate and if the arg is not present also the failure is extremely clear. WDYT? @viliakov

@LouisLotter LouisLotter force-pushed the STAC-24960-fix-oci-base-resolution branch from 8c92b16 to 9fd5622 Compare June 9, 2026 07:02
@LouisLotter LouisLotter changed the title STAC-24960 fix OCI base image resolution STAC-24960 drop OCI base image labels Jun 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants