Skip to content

fix(release): build container images via docker/build-push-action - #23

Merged
stubbi merged 1 commit into
mainfrom
fix/release-docker-pipeline
May 13, 2026
Merged

fix(release): build container images via docker/build-push-action#23
stubbi merged 1 commit into
mainfrom
fix/release-docker-pipeline

Conversation

@stubbi

@stubbi stubbi commented May 13, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • GoReleaser's experimental dockers_v2 failed to stage the prebuilt binary into the build context, breaking v0.1.3 with "/manager": not found
  • Switch to docker/build-push-action@v6 with multi-arch + native Go cross-compile (FROM --platform=$BUILDPLATFORM), which is faster than QEMU emulation
  • Image build is now a separate workflow step; signed with cosign and SBOM-attested off the multi-arch manifest digest

Test plan

  • Build workflow green (single-arch smoke test)
  • On next tag (v0.1.4), Release workflow:
    • GoReleaser produces binary archives, checksums, dist/install.yaml
    • docker/build-push-action pushes ghcr.io/stubbi/hermes-operator:{tag,major.minor,latest}
    • cosign sign succeeds on the manifest digest
    • SBOM uploaded + attested
    • Helm OCI push job runs

🤖 Generated with Claude Code

GoReleaser's experimental dockers_v2 fails to stage the prebuilt
binary into the build context, breaking v0.1.3 with:
  failed to calculate checksum of ref ...: "/manager": not found

Switch to docker/build-push-action with multi-arch + native Go
cross-compile via FROM --platform=$BUILDPLATFORM, which is both
simpler and faster than the prebuilt-binary handoff (no QEMU).

GoReleaser still owns binary archives, checksums, install.yaml, and
the GitHub release; image build is now a separate workflow step,
signed and SBOM-attested off the multi-arch manifest digest.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@stubbi
stubbi enabled auto-merge (squash) May 13, 2026 09:13
@stubbi
stubbi merged commit d1b4862 into main May 13, 2026
14 checks passed
@stubbi
stubbi deleted the fix/release-docker-pipeline branch May 13, 2026 09:16
@stubbi stubbi mentioned this pull request May 13, 2026
stubbi added a commit that referenced this pull request May 13, 2026
🤖 I have created a release *beep* *boop*
---


##
[0.1.4](v0.1.3...v0.1.4)
(2026-05-13)


### Bug Fixes

* **release:** build container images via docker/build-push-action
([#23](#23))
([d1b4862](d1b4862))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).
@stubbi stubbi mentioned this pull request May 13, 2026
stubbi added a commit that referenced this pull request May 13, 2026
🤖 I have created a release *beep* *boop*
---


##
[0.1.6](v0.1.5...v0.1.6)
(2026-05-13)


### Features

* hermes-operator v1.0.0 — plans 1–7 implementation
([#1](#1))
([a99ad5c](a99ad5c))


### Bug Fixes

* **ci:** semantic Bundle RBAC sync check (was: file-diff flake)
([#16](#16))
([3b3b5a6](3b3b5a6))
* **release:** build container images via docker/build-push-action
([#23](#23))
([d1b4862](d1b4862))
* **release:** run make installer via goreleaser before:hooks
([#25](#25))
([5bcd154](5bcd154))
* **release:** trigger v0.1.2 (v0.1.1 tag has broken release.yaml)
([#18](#18))
([e3f8289](e3f8289))
* **release:** use --skip=validate instead of throw-away commit
([#20](#20))
([61f2099](61f2099))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant