Skip to content

ci: STEP 1: ECR BuildKit cache for oe-core Docker image#348

Open
neo-jesse wants to merge 2 commits into
mainfrom
feat/ci-docker-ecr-buildkit-cache
Open

ci: STEP 1: ECR BuildKit cache for oe-core Docker image#348
neo-jesse wants to merge 2 commits into
mainfrom
feat/ci-docker-ecr-buildkit-cache

Conversation

@neo-jesse

@neo-jesse neo-jesse commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Cache the CI Dockerfile build in ECR via BuildKit (cache-from / cache-to) when OT3_OE_DOCKER_ECR_REPOSITORY_{DEV,PROD} is set.
  • Pin aws-actions/amazon-ecr-login to the peeled v2.0.1 commit SHA (zizmor-safe).
  • Document the ECR cache variables and required IAM permissions.

Test plan

  • Stage-dev build with ECR repo vars set: Docker build reuses layers on a second run
  • Confirm zizmor passes on the workflow
  • Unset ECR vars still falls back to plain docker build

neo-jesse and others added 2 commits July 13, 2026 11:13
Use the peeled v2.0.1 commit instead of the annotated tag object so
zizmor impostor-commit and ref-version-mismatch checks pass.

Co-authored-by: Cursor <cursoragent@cursor.com>
@neo-jesse neo-jesse changed the title ci: ECR BuildKit cache for oe-core Docker image ci: STEP 1: ECR BuildKit cache for oe-core Docker image Jul 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant