Commit 45d956d7 authored by semantic-release-bot's avatar semantic-release-bot
Browse files

chore(release): 7.0.1 [skip ci] 

## [7.0.1](https://gitlab.com/to-be-continuous/docker/compare/7.0.0...7.0.1) (2025-08-13)

### Bug Fixes

* support preinstalled cosign ([9db00147](https://gitlab.com/to-be-continuous/docker/commit/9db00147e88b63733044016f51fb3412ca2d16c9))
parent 0624a453

CHANGELOG.md

+7 −0
Original line number Diff line number Diff line 
## [7.0.1](https://gitlab.com/to-be-continuous/docker/compare/7.0.0...7.0.1) (2025-08-13)





### Bug Fixes



* support preinstalled cosign ([9db0014](https://gitlab.com/to-be-continuous/docker/commit/9db00147e88b63733044016f51fb3412ca2d16c9))



# [7.0.0](https://gitlab.com/to-be-continuous/docker/compare/6.4.0...7.0.0) (2025-08-13)

README.md

+11 −11
Original line number Diff line number Diff line
@@ -16,7 +16,7 @@ Add the following to your `.gitlab-ci.yml`: 
```yaml

include:

  # 1: include the component

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.0

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.1

    # 2: set/override component inputs

    inputs:

      build-tool: buildah # ⚠ this is only an example
@@ -30,7 +30,7 @@ Add the following to your `.gitlab-ci.yml`: 
include:

  # 1: include the template

  - project: 'to-be-continuous/docker'

    ref: '7.0.0'

    ref: '7.0.1'

    file: '/templates/gitlab-ci-docker.yml'



variables:
@@ -593,7 +593,7 @@ Here is a `.gitlab-ci.yaml` using an external Docker registry: 


```yaml

include:

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.0

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.1

    inputs:

      snapshot-image: "registry.acme.host/$CI_PROJECT_NAME/snapshot:$CI_COMMIT_REF_SLUG"

      release-image: "registry.acme.host/$CI_PROJECT_NAME:$CI_COMMIT_REF_NAME"
@@ -608,7 +608,7 @@ Here is a `.gitlab-ci.yaml` that builds 2 Docker images from the same project (u 


```yaml

include:

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.0

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.1



.docker-base:

  parallel:
@@ -627,7 +627,7 @@ If you want to use the template with an externally built Docker image (scan for 


```yaml

include:

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.0

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.1

    inputs:

      build-tool: "external"

      snapshot-image: "registry.acme.host/image:tag" # externally built image
@@ -676,9 +676,9 @@ With: 
```yaml

include:

  # main template

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.0

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.1

  # Vault variant

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-vault@7.0.0

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-vault@7.0.1

    inputs:

      # audience claim for JWT

      vault-oidc-aud: "https://vault.acme.host"
@@ -724,7 +724,7 @@ to use the snapshot image repository (will host your snapshot image as well as c 


```yaml

include:

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.0

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.1

    inputs:

      build-tool: "kaniko" # Only Kaniko has been proved to work for this use case YET

      # untested & unverified container image
@@ -732,7 +732,7 @@ include: 
      # ⚠ don't forget to create the '{GCP_REGION}-docker.pkg.dev/{GCP_PROJECT_ID}/{YOUR_REPOSITORY}/{YOUR_IMAGE_NAME}/snapshot/cache' repo for Kaniko

      # validated container image (published)

      release-image: "{GCP_REGION}-docker.pkg.dev/{GCP_PROJECT_ID}/{YOUR_REPOSITORY}/{YOUR_IMAGE_NAME}:$CI_COMMIT_REF_NAME"

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-gcp@7.0.0

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-gcp@7.0.1

    inputs:

      # default WIF provider

      gcp-oidc-provider: "projects/{GCP_PROJECT_NUMBER}/locations/global/workloadIdentityPools/{YOUR_WIF_POOL_NAME}/providers/gitlab-diod"
@@ -797,14 +797,14 @@ then set the required configuration. 


```yaml

include:

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.0

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.0.1

    inputs:

      # untested & unverified container image

      snapshot-image: "123456789012.dkr.ecr.us-east-1.amazonaws.com/$CI_PROJECT_PATH_SLUG/snapshot:$CI_COMMIT_REF_SLUG"

      # ⚠ don't forget to create the '123456789012.dkr.ecr.us-east-1.amazonaws.com/$CI_PROJECT_PATH/snapshot/cache' repo for Kaniko

      # validated container image (published)

      release-image: "123456789012.dkr.ecr.us-east-1.amazonaws.com/$CI_PROJECT_PATH_SLUG:$CI_COMMIT_REF_NAME"

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-ecr@7.0.0

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-ecr@7.0.1

    inputs:

      # default Role ARN (using OIDC authentication method)

      aws-oidc-role-arn: "arn:aws:iam::123456789012:role/gitlab-ci"

templates/gitlab-ci-docker-ecr.yml

+1 −1
Original line number Diff line number Diff line
@@ -45,7 +45,7 @@ variables: 
.docker-base:

  services:

    - name: "$TBC_TRACKING_IMAGE"

      command: ["--service", "docker", "7.0.0"]

      command: ["--service", "docker", "7.0.1"]

    - name: "$TBC_AWS_PROVIDER_IMAGE"

      alias: "aws-auth-provider"

  id_tokens:

templates/gitlab-ci-docker-gcp.yml

+1 −1
Original line number Diff line number Diff line
@@ -44,7 +44,7 @@ variables: 
.docker-base:

  services:

    - name: "$TBC_TRACKING_IMAGE"

      command: ["--service", "docker", "7.0.0"]

      command: ["--service", "docker", "7.0.1"]

    - name: "$TBC_GCP_PROVIDER_IMAGE"

      alias: "gcp-auth-provider"

  variables:

templates/gitlab-ci-docker-vault.yml

+1 −1
Original line number Diff line number Diff line
@@ -22,7 +22,7 @@ variables: 
.docker-base:

  services:

    - name: "$TBC_TRACKING_IMAGE"

      command: ["--service", "docker", "7.0.0"]

      command: ["--service", "docker", "7.0.1"]

    - name: "$TBC_VAULT_IMAGE"

      alias: "vault-secrets-provider"

      variables: