AWS ECR Action

This Action allows you to create Docker images and push into a ECR repository.

Parameters

Parameter	Type	Default	Description
`access_key_id`	`string`		Your AWS access key id
`secret_access_key`	`string`		Your AWS secret access key
`account_id`	`string`		Your AWS Account ID
`repo`	`string`		Name of your ECR repository
`region`	`string`		Your AWS region
`create_repo`	`boolean`	`false`	Set this to true to create the repository if it does not already exist
`set_repo_policy`	`boolean`	`false`	Set this to true to set a IAM policy on the repository
`repo_policy_file`	`string`	`repo-policy.json`	Set this to repository policy statement json file. only used if the set_repo_policy is set to true
`image_scanning_configuration`	`boolean`	`false`	Set this to True if you want AWS to scan your images for vulnerabilities
`tags`	`string`	`latest`	Comma-separated string of ECR image tags (ex latest,1.0.0,)
`dockerfile`	`string`	`Dockerfile`	Name of Dockerfile to use
`docker_image_path`	`string`	``	Path to the docker image if build at as a seperate step. If this path is provided docker build is skipped and passed image is uploaded. The tags must be associated with the image built.
`extra_build_args`	`string`	`""`	Extra flags to pass to docker build (see docs.docker.com/engine/reference/commandline/build)
`cache_from`	`string`	`""`	Images to use as cache for the docker build (see `--cache-from` argument docs.docker.com/engine/reference/commandline/build)
`path`	`string`	`.`	Path to Dockerfile, defaults to the working directory
`prebuild_script`	`string`		Relative path from top-level to script to run before Docker build
`registry_ids`	`string`		: A comma-delimited list of AWS account IDs that are associated with the ECR registries. If you do not specify a registry, the default ECR registry is assumed

Usage

Build the docker image

jobs:
  build-and-push:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - uses: docker://ghcr.io/argonautdev/aws-ecr-action:latest
        with:
          access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          account_id: ${{ secrets.AWS_ACCOUNT_ID }}
          repo: docker/repo
          region: ap-northeast-2
          tags: latest,${{ github.sha }}
          create_repo: true
          image_scanning_configuration: true
          set_repo_policy: true
          repo_policy_file: repo-policy.json

Pass the specified docker image

jobs:
  build-and-push:
    runs-on: ubuntu-latest
    steps:
      - name: Get Short SHA
        id: get_sha
        run: echo ::set-output name=SHA_SHORT::$(git rev-parse --short HEAD)
      - name: Build Image
        uses: docker/build-push-action@v2
        id: build
        with:
          context: .
          file: ./Dockerfile
          push: false
          tags: ${{ secrets. AWS_ACCOUNT_ID }}.dkr.ecr.us-east-2.amazonaws.com/docker/repo:${{ steps.get_sha.outputs.SHA_SHORT }}
          outputs: type=docker,dest=/tmp/image.tar
      - name: Upload artifact
        uses: actions/upload-artifact@v2
        with:
          name: image
          path: /tmp/image.tar

      - name: Download artifact
        uses: actions/download-artifact@v2
        with:
          name: image
          path: ./tmp

      - name: Push to ecr
        uses: argonautdev/aws-ecr-action@pr-tar-image-support
        id: push_to_ecr
        with:
          access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          account_id: ${{ secrets.AWS_ACCOUNT_ID }}
          repo: docker/repo
          region: us-east-2
          tags: ${{ steps.get_sha.outputs.SHA_SHORT }}
          create_repo: true
          image_scanning_configuration: true
          docker_image_path: ./tmp/image.tar

If you don't want to use the latest docker image, you can point to any reference in the repo directly.

- uses: argonautdev/aws-ecr-action@master
# or
- uses: argonautdev/aws-ecr-action@v1
# or
- uses: argonautdev/aws-ecr-action@0589ad88c51a1b08fd910361ca847ee2cb708a30

License

The MIT License (MIT)