Add Chainguard registry (cgr.dev) login support

Browse source

Implement native OIDC-based authentication for Chainguard's container
registry, following the same pattern as the existing AWS ECR integration.

When registry is set to cgr.dev, the action automatically exchanges a
GitHub Actions OIDC token with Chainguard's STS endpoint for a short-lived
registry credential, removing the need for chainctl or long-lived pull tokens.

New inputs: chainguard (auto/true/false), chainguard-identity.

Signed-off-by: Augustus Nguyen <theflash28012002@gmail.com>

...

This commit is contained in:

Augustus Nguyen 2026-04-21 11:11:53 +07:00

parent 4a8376e001

commit 4bcfaae325

9 changed files with 11038 additions and 5741 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

7112

package-lock.json generated Normal file

View file

File diff suppressed because it is too large Load diff