chore(release): 7.2.1 [skip ci] (d54b9437) · Commits · to be continuous... / Docker

CHANGELOG.md

+7 −0

Original line number	Diff line number	Diff line
		## [7.2.1](https://gitlab.com/to-be-continuous/docker/compare/7.2.0...7.2.1) (2025-08-19)


		### Bug Fixes

		* sign: support sbom attestation with parallel matrix ([821bc66](https://gitlab.com/to-be-continuous/docker/commit/821bc66d8a68c7a2866715baf5bf7870d77782e1))

		# [7.2.0](https://gitlab.com/to-be-continuous/docker/compare/7.1.2...7.2.0) (2025-08-18)

README.md

+11 −11

Original line number	Diff line number	Diff line
		@@ -16,7 +16,7 @@ Add the following to your `.gitlab-ci.yml`:
		```yaml
		include:
		# 1: include the component
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.1
		# 2: set/override component inputs
		inputs:
		build-tool: buildah # ⚠ this is only an example
		@@ -30,7 +30,7 @@ Add the following to your `.gitlab-ci.yml`:
		include:
		# 1: include the template
		- project: 'to-be-continuous/docker'
		ref: '7.2.0'
		ref: '7.2.1'
		file: '/templates/gitlab-ci-docker.yml'

		variables:
		@@ -594,7 +594,7 @@ Here is a `.gitlab-ci.yaml` using an external Docker registry:

		```yaml
		include:
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.1
		inputs:
		snapshot-image: "registry.acme.host/$CI_PROJECT_NAME/snapshot:$CI_COMMIT_REF_SLUG"
		release-image: "registry.acme.host/$CI_PROJECT_NAME:$CI_COMMIT_REF_NAME"
		@@ -609,7 +609,7 @@ Here is a `.gitlab-ci.yaml` that builds 2 Docker images from the same project (u

		```yaml
		include:
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.1

		.docker-base:
		parallel:
		@@ -628,7 +628,7 @@ If you want to use the template with an externally built Docker image (scan for

		```yaml
		include:
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.1
		inputs:
		build-tool: "external"
		snapshot-image: "registry.acme.host/image:tag" # externally built image
		@@ -677,9 +677,9 @@ With:
		```yaml
		include:
		# main template
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.1
		# Vault variant
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-vault@7.2.0
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-vault@7.2.1
		inputs:
		# audience claim for JWT
		vault-oidc-aud: "https://vault.acme.host"
		@@ -725,7 +725,7 @@ to use the snapshot image repository (will host your snapshot image as well as c

		```yaml
		include:
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.1
		inputs:
		build-tool: "kaniko" # Only Kaniko has been proved to work for this use case YET
		# untested & unverified container image
		@@ -733,7 +733,7 @@ include:
		# ⚠ don't forget to create the '{GCP_REGION}-docker.pkg.dev/{GCP_PROJECT_ID}/{YOUR_REPOSITORY}/{YOUR_IMAGE_NAME}/snapshot/cache' repo for Kaniko
		# validated container image (published)
		release-image: "{GCP_REGION}-docker.pkg.dev/{GCP_PROJECT_ID}/{YOUR_REPOSITORY}/{YOUR_IMAGE_NAME}:$CI_COMMIT_REF_NAME"
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-gcp@7.2.0
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-gcp@7.2.1
		inputs:
		# default WIF provider
		gcp-oidc-provider: "projects/{GCP_PROJECT_NUMBER}/locations/global/workloadIdentityPools/{YOUR_WIF_POOL_NAME}/providers/gitlab-diod"
		@@ -798,14 +798,14 @@ then set the required configuration.

		```yaml
		include:
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.0
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker@7.2.1
		inputs:
		# untested & unverified container image
		snapshot-image: "123456789012.dkr.ecr.us-east-1.amazonaws.com/$CI_PROJECT_PATH_SLUG/snapshot:$CI_COMMIT_REF_SLUG"
		# ⚠ don't forget to create the '123456789012.dkr.ecr.us-east-1.amazonaws.com/$CI_PROJECT_PATH/snapshot/cache' repo for Kaniko
		# validated container image (published)
		release-image: "123456789012.dkr.ecr.us-east-1.amazonaws.com/$CI_PROJECT_PATH_SLUG:$CI_COMMIT_REF_NAME"
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-ecr@7.2.0
		- component: $CI_SERVER_FQDN/to-be-continuous/docker/gitlab-ci-docker-ecr@7.2.1
		inputs:
		# default Role ARN (using OIDC authentication method)
		aws-oidc-role-arn: "arn:aws:iam::123456789012:role/gitlab-ci"

templates/gitlab-ci-docker-ecr.yml

+1 −1

Original line number	Diff line number	Diff line
		@@ -45,7 +45,7 @@ variables:
		.docker-base:
		services:
		- name: "$TBC_TRACKING_IMAGE"
		command: ["--service", "docker", "7.2.0"]
		command: ["--service", "docker", "7.2.1"]
		- name: "$TBC_AWS_PROVIDER_IMAGE"
		alias: "aws-auth-provider"
		id_tokens:

templates/gitlab-ci-docker-gcp.yml

+1 −1

Original line number	Diff line number	Diff line
		@@ -44,7 +44,7 @@ variables:
		.docker-base:
		services:
		- name: "$TBC_TRACKING_IMAGE"
		command: ["--service", "docker", "7.2.0"]
		command: ["--service", "docker", "7.2.1"]
		- name: "$TBC_GCP_PROVIDER_IMAGE"
		alias: "gcp-auth-provider"
		variables:

templates/gitlab-ci-docker-vault.yml

+1 −1

Original line number	Diff line number	Diff line
		@@ -22,7 +22,7 @@ variables:
		.docker-base:
		services:
		- name: "$TBC_TRACKING_IMAGE"
		command: ["--service", "docker", "7.2.0"]
		command: ["--service", "docker", "7.2.1"]
		- name: "$TBC_VAULT_IMAGE"
		alias: "vault-secrets-provider"
		variables: