Skip to content

[DEVOPS-4869] ci(docker): authenticate to docker hub with oidc #43

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Dion Gionet Mallet (dion-gionet) merged 4 commits into from
Oct 19, 2026
Merged

[DEVOPS-4869] ci(docker): authenticate to docker hub with oidc #43

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
3640041
[DEVOPS-4869] ci(docker): authenticate to docker hub with oidc
rbstp Oct 16, 2026
920a29f
[DEVOPS-4869] ci(docker): drop caller permission blocks
rbstp Oct 16, 2026
d700a67
[DEVOPS-4869] ci(docker): [temp] oidc login test
rbstp Oct 16, 2026
3b42b87
[DEVOPS-4869] ci(docker): remove oidc login test
rbstp Oct 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 6 additions & 2 deletions .github/workflows/build-image.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,9 @@ jobs:
build-image:
runs-on: ubuntu-latest
environment: build
permissions:
contents: read
id-token: write

steps:
- name: Download files from release
Expand Down Expand Up @@ -51,9 +54,10 @@ jobs:

- name: Login to DockerHub
uses: docker/login-action@v4
env:
DOCKERHUB_OIDC_CONNECTIONID: bc91ef0a-e24f-4b43-bfa2-d1a7b06732e6
with:
username: devolutionsbot
password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
username: devolutions

- name: Build and push image
id: docker_build
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/shared.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -104,6 +104,9 @@ jobs:

build-image:
needs: [build]
permissions:
contents: read
id-token: write
secrets: inherit
uses: ./.github/workflows/build-image.yml
with:
Expand Down
Loading