ci: use git context

.github/workflows/ci.yaml

@@ -23,10 +23,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       -
-        name: Checkout
-        uses: actions/checkout@v4
+        name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      -
+        name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
         with:
-          fetch-depth: 0
+          version: ${{ env.BUILDX_VERSION }}
+          driver-opts: image=${{ env.BUILDKIT_IMAGE }}
+          buildkitd-flags: --debug
       -
         name: Docker meta
         id: meta
@@ -44,16 +49,6 @@ jobs:
             org.opencontainers.image.title=BuildKit Syft scanner
             org.opencontainers.image.description=SBOM generation for BuildKit images
             org.opencontainers.image.vendor=Docker Inc.
-      -
-        name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-      -
-        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-        with:
-          version: ${{ env.BUILDX_VERSION }}
-          driver-opts: image=${{ env.BUILDKIT_IMAGE }}
-          buildkitd-flags: --debug
       -
         name: Login to DockerHub
         if: github.event_name != 'pull_request'
@@ -65,19 +60,28 @@ jobs:
         name: Build
         uses: docker/bake-action@v4
         with:
+          source: "{{defaultContext}}"
           files: |
-            ./docker-bake.hcl
-            ${{ steps.meta.outputs.bake-file }}
+            cwd://${{ steps.meta.outputs.bake-file }}
           targets: image-all
           push: ${{ github.event_name != 'pull_request' }}
           set: |
             *.cache-from=type=gha,scope=image
             *.cache-to=type=gha,scope=image,mode=max
             *.attest=type=sbom
+
+  dockerhub-readme:
+    runs-on: ubuntu-latest
+    if: github.event_name != 'pull_request'
+    needs:
+      - build
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
       -
         name: Update repo description
-        if: github.event_name != 'pull_request'
-        uses: peter-evans/dockerhub-description@v4
+        uses: peter-evans/dockerhub-description@v3
         with:
           username: ${{ vars.DOCKERPUBLICBOT_USERNAME }}
           password: ${{ secrets.DOCKERPUBLICBOT_DELETE_PAT }}

.github/workflows/validate.yml

@@ -21,14 +21,12 @@ jobs:
           - validate-license
           - validate-vendor
     steps:
-      -
-        name: Checkout
-        uses: actions/checkout@v4
       -
         name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
       -
         name: Run
         uses: docker/bake-action@v4
         with:
+          source: "{{defaultContext}}"
           targets: ${{ matrix.target }}

docker-bake.hcl

@@ -28,6 +28,7 @@ variable "IMAGE_LOCAL" {
 
 target "_common" {
   args = {
+    BUILDKIT_CONTEXT_KEEP_GIT_DIR = 1
     GO_VERSION = GO_VERSION
     GIT_REF = GITHUB_REF
   }