Add Chainguard registry (cgr.dev) login support

Implement native OIDC-based authentication for Chainguard's container
registry, following the same pattern as the existing AWS ECR integration.

When registry is set to cgr.dev, the action automatically exchanges a
GitHub Actions OIDC token with Chainguard's STS endpoint for a short-lived
registry credential, removing the need for chainctl or long-lived pull tokens.

New inputs: chainguard (auto/true/false), chainguard-identity.

Signed-off-by: Augustus Nguyen <theflash28012002@gmail.com>
This commit is contained in:
Augustus Nguyen 2026-04-21 11:11:53 +07:00
parent 4a8376e001
commit 4bcfaae325
9 changed files with 11038 additions and 5741 deletions

View file

@ -23,6 +23,7 @@
"packageManager": "yarn@4.9.2",
"dependencies": {
"@actions/core": "^3.0.0",
"@actions/http-client": "^4.0.0",
"@aws-sdk/client-ecr": "^3.1020.0",
"@aws-sdk/client-ecr-public": "^3.1020.0",
"@docker/actions-toolkit": "^0.86.0",