Commit 6cce9b3d authored by semantic-release-bot's avatar semantic-release-bot
Browse files

chore(release): 7.2.0 [skip ci] 

# [7.2.0](https://gitlab.com/to-be-continuous/docker/compare/7.1.2...7.2.0) (2025-08-18)

### Features

* trivy codequality report ([c450fb9e](https://gitlab.com/to-be-continuous/docker/commit/c450fb9e10fbd5c44dac698c53890a66d4589b81))
parent 4d7f6581

CHANGELOG.md

+7 −0
Original line number Diff line number Diff line 
# [7.2.0](https://gitlab.com/to-be-continuous/docker/compare/7.1.2...7.2.0) (2025-08-18)





### Features



* trivy codequality report ([c450fb9](https://gitlab.com/to-be-continuous/docker/commit/c450fb9e10fbd5c44dac698c53890a66d4589b81))



## [7.1.2](https://gitlab.com/to-be-continuous/docker/compare/7.1.1...7.1.2) (2025-08-18)

README.md

+11 −11
Original line number Diff line number Diff line
@@ -16,7 +16,7 @@ Add the following to your `.gitlab-ci.yml`: 
```yaml

include:

  # 1: include the component

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.1.2

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0

    # 2: set/override component inputs

    inputs:

      build-tool: buildah # ⚠ this is only an example
@@ -30,7 +30,7 @@ Add the following to your `.gitlab-ci.yml`: 
include:

  # 1: include the template

  - project: 'to-be-continuous/docker'

    ref: '7.1.2'

    ref: '7.2.0'

    file: '/templates/gitlab-ci-docker.yml'



variables:
@@ -594,7 +594,7 @@ Here is a `.gitlab-ci.yaml` using an external Docker registry: 


```yaml

include:

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.1.2

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0

    inputs:

      snapshot-image: "registry.acme.host/$CI_PROJECT_NAME/snapshot:$CI_COMMIT_REF_SLUG"

      release-image: "registry.acme.host/$CI_PROJECT_NAME:$CI_COMMIT_REF_NAME"
@@ -609,7 +609,7 @@ Here is a `.gitlab-ci.yaml` that builds 2 Docker images from the same project (u 


```yaml

include:

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.1.2

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0



.docker-base:

  parallel:
@@ -628,7 +628,7 @@ If you want to use the template with an externally built Docker image (scan for 


```yaml

include:

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.1.2

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0

    inputs:

      build-tool: "external"

      snapshot-image: "registry.acme.host/image:tag" # externally built image
@@ -677,9 +677,9 @@ With: 
```yaml

include:

  # main template

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.1.2

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0

  # Vault variant

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-vault@7.1.2

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-vault@7.2.0

    inputs:

      # audience claim for JWT

      vault-oidc-aud: "https://vault.acme.host"
@@ -725,7 +725,7 @@ to use the snapshot image repository (will host your snapshot image as well as c 


```yaml

include:

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.1.2

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0

    inputs:

      build-tool: "kaniko" # Only Kaniko has been proved to work for this use case YET

      # untested & unverified container image
@@ -733,7 +733,7 @@ include: 
      # ⚠ don't forget to create the '{GCP_REGION}-docker.pkg.dev/{GCP_PROJECT_ID}/{YOUR_REPOSITORY}/{YOUR_IMAGE_NAME}/snapshot/cache' repo for Kaniko

      # validated container image (published)

      release-image: "{GCP_REGION}-docker.pkg.dev/{GCP_PROJECT_ID}/{YOUR_REPOSITORY}/{YOUR_IMAGE_NAME}:$CI_COMMIT_REF_NAME"

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-gcp@7.1.2

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-gcp@7.2.0

    inputs:

      # default WIF provider

      gcp-oidc-provider: "projects/{GCP_PROJECT_NUMBER}/locations/global/workloadIdentityPools/{YOUR_WIF_POOL_NAME}/providers/gitlab-diod"
@@ -798,14 +798,14 @@ then set the required configuration. 


```yaml

include:

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.1.2

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0

    inputs:

      # untested & unverified container image

      snapshot-image: "123456789012.dkr.ecr.us-east-1.amazonaws.com/$CI_PROJECT_PATH_SLUG/snapshot:$CI_COMMIT_REF_SLUG"

      # ⚠ don't forget to create the '123456789012.dkr.ecr.us-east-1.amazonaws.com/$CI_PROJECT_PATH/snapshot/cache' repo for Kaniko

      # validated container image (published)

      release-image: "123456789012.dkr.ecr.us-east-1.amazonaws.com/$CI_PROJECT_PATH_SLUG:$CI_COMMIT_REF_NAME"

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-ecr@7.1.2

  - component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-ecr@7.2.0

    inputs:

      # default Role ARN (using OIDC authentication method)

      aws-oidc-role-arn: "arn:aws:iam::123456789012:role/gitlab-ci"

templates/gitlab-ci-docker-ecr.yml

+1 −1
Original line number Diff line number Diff line
@@ -45,7 +45,7 @@ variables: 
.docker-base:

  services:

    - name: "$TBC_TRACKING_IMAGE"

      command: ["--service", "docker", "7.1.2"]

      command: ["--service", "docker", "7.2.0"]

    - name: "$TBC_AWS_PROVIDER_IMAGE"

      alias: "aws-auth-provider"

  id_tokens:

templates/gitlab-ci-docker-gcp.yml

+1 −1
Original line number Diff line number Diff line
@@ -44,7 +44,7 @@ variables: 
.docker-base:

  services:

    - name: "$TBC_TRACKING_IMAGE"

      command: ["--service", "docker", "7.1.2"]

      command: ["--service", "docker", "7.2.0"]

    - name: "$TBC_GCP_PROVIDER_IMAGE"

      alias: "gcp-auth-provider"

  variables:

templates/gitlab-ci-docker-vault.yml

+1 −1
Original line number Diff line number Diff line
@@ -22,7 +22,7 @@ variables: 
.docker-base:

  services:

    - name: "$TBC_TRACKING_IMAGE"

      command: ["--service", "docker", "7.1.2"]

      command: ["--service", "docker", "7.2.0"]

    - name: "$TBC_VAULT_IMAGE"

      alias: "vault-secrets-provider"

      variables: