Merge pull request #214 from docker/dependabot/npm_and_yarn/octokit/plugin-rest-endpoint-methods-10.2.0

build(deps): bump @octokit/plugin-rest-endpoint-methods from 10.1.5 to 10.2.0
Merge pull request #213 from crazy-max/switch-to-lima
2023-11-29 02:59:11 -08:00 · 2023-11-29 02:47:26 -08:00 · 2023-11-28 22:26:11 +00:00 · 2023-11-27 04:36:42 -08:00 · 2023-11-27 01:58:24 +01:00 · 2023-11-27 01:58:23 +01:00
93 changed files with 20814 additions and 4419 deletions
--- a/.eslintignore
+++ b/.eslintignore
@@ -0,0 +1,4 @@
+/.yarn/**
+/lib/**
+/coverage/**
+/node_modules/**
--- a/.eslintrc.json
+++ b/.eslintrc.json
@@ -1,23 +1,36 @@
 {
  "env": {
    "node": true,
-    "es2021": true,
-    "jest/globals": true
+    "es6": true,
+    "mocha": true,
+    "jest": true
  },
  "extends": [
    "eslint:recommended",
+    "plugin:@typescript-eslint/eslint-recommended",
    "plugin:@typescript-eslint/recommended",
+    "plugin:import/errors",
+    "plugin:import/typescript", // this is needed to allow importing typescript files from JS
+    "plugin:import/warnings",
    "plugin:jest/recommended",
    "plugin:prettier/recommended"
  ],
  "parser": "@typescript-eslint/parser",
  "parserOptions": {
-    "ecmaVersion": "latest",
+    "ecmaVersion": "2023",
    "sourceType": "module"
  },
  "plugins": [
    "@typescript-eslint",
    "jest",
    "prettier"
-  ]
+  ],
+  "rules": {
+    "import/no-unresolved": [
+      "error", {
+        "ignore": ["csv-parse/sync", "@octokit/openapi-types"]
+      }
+    ],
+    "jest/no-disabled-tests": 0
+  }
 }
--- a/.github/buildx-lab-releases.json
+++ b/.github/buildx-lab-releases.json
@@ -0,0 +1,207 @@
+{
+  "latest": {
+    "id": 123496811,
+    "tag_name": "v0.11.2-desktop.5",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.11.2-desktop.5",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/checksums.txt"
+    ]
+  },
+  "v0.12.0-desktop.1": {
+    "id": 130699107,
+    "tag_name": "v0.12.0-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.12.0-desktop.1",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/buildx-v0.12.0-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.0-desktop.1/checksums.txt"
+    ]
+  },
+  "v0.11.2-desktop.5": {
+    "id": 123496811,
+    "tag_name": "v0.11.2-desktop.5",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.11.2-desktop.5",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/checksums.txt"
+    ]
+  },
+  "v0.11.2-desktop.4": {
+    "id": 119399782,
+    "tag_name": "v0.11.2-desktop.4",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.11.2-desktop.4",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/buildx-v0.11.2-desktop.4.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.4/checksums.txt"
+    ]
+  },
+  "v0.11.2-desktop.2": {
+    "id": 118213369,
+    "tag_name": "v0.11.2-desktop.2",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.11.2-desktop.2",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/buildx-v0.11.2-desktop.2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.2/checksums.txt"
+    ]
+  }
+}
--- a/.github/buildx-releases.json
+++ b/.github/buildx-releases.json
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -11,6 +11,7 @@ updates:
    directory: "/"
    schedule:
      interval: "daily"
+    versioning-strategy: "increase"
    allow:
      - dependency-type: "production"
    labels:
--- a/.github/docker-releases.json
+++ b/.github/docker-releases.json
@@ -0,0 +1,872 @@
+{
+  "latest": {
+    "id": 126933125,
+    "tag_name": "v24.0.7",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.7",
+    "assets": []
+  },
+  "v25.0.0-beta.1": {
+    "id": 129244747,
+    "tag_name": "v25.0.0-beta.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0-beta.1",
+    "assets": []
+  },
+  "v24.0.7": {
+    "id": 126933125,
+    "tag_name": "v24.0.7",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.7",
+    "assets": []
+  },
+  "v23.0.7": {
+    "id": 122845906,
+    "tag_name": "v23.0.7",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.7",
+    "assets": []
+  },
+  "v20.10.26": {
+    "id": 122843129,
+    "tag_name": "v20.10.26",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.26",
+    "assets": []
+  },
+  "v24.0.6": {
+    "id": 120021175,
+    "tag_name": "v24.0.6",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.6",
+    "assets": []
+  },
+  "v24.0.5": {
+    "id": 113348684,
+    "tag_name": "v24.0.5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.5",
+    "assets": []
+  },
+  "v24.0.4": {
+    "id": 111464537,
+    "tag_name": "v24.0.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.4",
+    "assets": []
+  },
+  "v24.0.3": {
+    "id": 111300256,
+    "tag_name": "v24.0.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.3",
+    "assets": []
+  },
+  "v24.0.2": {
+    "id": 104366762,
+    "tag_name": "v24.0.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.2",
+    "assets": []
+  },
+  "v24.0.1": {
+    "id": 103671743,
+    "tag_name": "v24.0.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.1",
+    "assets": []
+  },
+  "v24.0.0": {
+    "id": 103200193,
+    "tag_name": "v24.0.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.0",
+    "assets": []
+  },
+  "v20.10.25": {
+    "id": 103070540,
+    "tag_name": "v20.10.25",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.25",
+    "assets": []
+  },
+  "v24.0.0-rc.4": {
+    "id": 102846110,
+    "tag_name": "v24.0.0-rc.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.0-rc.4",
+    "assets": []
+  },
+  "v24.0.0-rc.3": {
+    "id": 102708870,
+    "tag_name": "v24.0.0-rc.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.0-rc.3",
+    "assets": []
+  },
+  "v23.0.6": {
+    "id": 102196340,
+    "tag_name": "v23.0.6",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.6",
+    "assets": []
+  },
+  "v24.0.0-rc.2": {
+    "id": 102091676,
+    "tag_name": "v24.0.0-rc.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.0-rc.2",
+    "assets": []
+  },
+  "v24.0.0-rc.1": {
+    "id": 101305950,
+    "tag_name": "v24.0.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.0-rc.1",
+    "assets": []
+  },
+  "v23.0.5": {
+    "id": 101005794,
+    "tag_name": "v23.0.5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.5",
+    "assets": []
+  },
+  "v23.0.4": {
+    "id": 99811576,
+    "tag_name": "v23.0.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.4",
+    "assets": []
+  },
+  "v24.0.0-beta.2": {
+    "id": 99544545,
+    "tag_name": "v24.0.0-beta.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.0-beta.2",
+    "assets": []
+  },
+  "v23.0.3": {
+    "id": 98122882,
+    "tag_name": "v23.0.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.3",
+    "assets": []
+  },
+  "v20.10.24": {
+    "id": 98096018,
+    "tag_name": "v20.10.24",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.24",
+    "assets": []
+  },
+  "v24.0.0-beta.1": {
+    "id": 97703002,
+    "tag_name": "v24.0.0-beta.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.0-beta.1",
+    "assets": []
+  },
+  "v23.0.2": {
+    "id": 97163508,
+    "tag_name": "v23.0.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.2",
+    "assets": []
+  },
+  "v23.0.1": {
+    "id": 91964526,
+    "tag_name": "v23.0.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.1",
+    "assets": []
+  },
+  "v23.0.0": {
+    "id": 91109643,
+    "tag_name": "v23.0.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.0",
+    "assets": []
+  },
+  "v23.0.0-rc.4": {
+    "id": 91003797,
+    "tag_name": "v23.0.0-rc.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.0-rc.4",
+    "assets": []
+  },
+  "v23.0.0-rc.3": {
+    "id": 89780703,
+    "tag_name": "v23.0.0-rc.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.0-rc.3",
+    "assets": []
+  },
+  "v20.10.23": {
+    "id": 89647366,
+    "tag_name": "v20.10.23",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.23",
+    "assets": []
+  },
+  "v23.0.0-rc.2": {
+    "id": 88712255,
+    "tag_name": "v23.0.0-rc.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.0-rc.2",
+    "assets": []
+  },
+  "v23.0.0-rc.1": {
+    "id": 87299039,
+    "tag_name": "v23.0.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.0-rc.1",
+    "assets": []
+  },
+  "v20.10.22": {
+    "id": 86325342,
+    "tag_name": "v20.10.22",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.22",
+    "assets": []
+  },
+  "v23.0.0-beta.1": {
+    "id": 85159482,
+    "tag_name": "v23.0.0-beta.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.0-beta.1",
+    "assets": []
+  },
+  "v20.10.21": {
+    "id": 80977884,
+    "tag_name": "v20.10.21",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.21",
+    "assets": []
+  },
+  "v20.10.20": {
+    "id": 80248420,
+    "tag_name": "v20.10.20",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.20",
+    "assets": []
+  },
+  "v20.10.19": {
+    "id": 79847378,
+    "tag_name": "v20.10.19",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.19",
+    "assets": []
+  },
+  "v20.10.18": {
+    "id": 76694729,
+    "tag_name": "v20.10.18",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.18",
+    "assets": []
+  },
+  "v20.10.17": {
+    "id": 68777665,
+    "tag_name": "v20.10.17",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.17",
+    "assets": []
+  },
+  "v22.06.0-beta.0": {
+    "id": 68600276,
+    "tag_name": "v22.06.0-beta.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v22.06.0-beta.0",
+    "assets": []
+  },
+  "v20.10.16": {
+    "id": 66708640,
+    "tag_name": "v20.10.16",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.16",
+    "assets": []
+  },
+  "v20.10.15": {
+    "id": 66170410,
+    "tag_name": "v20.10.15",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.15",
+    "assets": []
+  },
+  "v20.10.14": {
+    "id": 62642891,
+    "tag_name": "v20.10.14",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.14",
+    "assets": []
+  },
+  "v20.10.13": {
+    "id": 61523032,
+    "tag_name": "v20.10.13",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.13",
+    "assets": []
+  },
+  "v20.10.12": {
+    "id": 56724849,
+    "tag_name": "v20.10.12",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.12",
+    "assets": []
+  },
+  "v20.10.11": {
+    "id": 53604359,
+    "tag_name": "v20.10.11",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.11",
+    "assets": []
+  },
+  "v20.10.10": {
+    "id": 51991530,
+    "tag_name": "v20.10.10",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.10",
+    "assets": []
+  },
+  "v20.10.9": {
+    "id": 50763745,
+    "tag_name": "v20.10.9",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.9",
+    "assets": []
+  },
+  "v20.10.8": {
+    "id": 47261111,
+    "tag_name": "v20.10.8",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.8",
+    "assets": []
+  },
+  "v20.10.7": {
+    "id": 44002175,
+    "tag_name": "v20.10.7",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.7",
+    "assets": []
+  },
+  "v20.10.6": {
+    "id": 41439201,
+    "tag_name": "v20.10.6",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.6",
+    "assets": []
+  },
+  "v20.10.5": {
+    "id": 39216180,
+    "tag_name": "v20.10.5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.5",
+    "assets": []
+  },
+  "v20.10.4": {
+    "id": 39014860,
+    "tag_name": "v20.10.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.4",
+    "assets": []
+  },
+  "v20.10.3": {
+    "id": 37231470,
+    "tag_name": "v20.10.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.3",
+    "assets": []
+  },
+  "v19.03.15": {
+    "id": 37231443,
+    "tag_name": "v19.03.15",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.15",
+    "assets": []
+  },
+  "v20.10.2": {
+    "id": 35990169,
+    "tag_name": "v20.10.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.2",
+    "assets": []
+  },
+  "v20.10.1": {
+    "id": 35281927,
+    "tag_name": "v20.10.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.1",
+    "assets": []
+  },
+  "v20.10.0": {
+    "id": 35069369,
+    "tag_name": "v20.10.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.0",
+    "assets": []
+  },
+  "v19.03.14": {
+    "id": 34677482,
+    "tag_name": "v19.03.14",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.14",
+    "assets": []
+  },
+  "v19.03.13": {
+    "id": 31493434,
+    "tag_name": "v19.03.13",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.13",
+    "assets": []
+  },
+  "v19.03.12": {
+    "id": 28065393,
+    "tag_name": "v19.03.12",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.12",
+    "assets": []
+  },
+  "v19.03.11": {
+    "id": 27237950,
+    "tag_name": "v19.03.11",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.11",
+    "assets": []
+  },
+  "v19.03.10": {
+    "id": 27043306,
+    "tag_name": "v19.03.10",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.10",
+    "assets": []
+  },
+  "v19.03.9": {
+    "id": 27002855,
+    "tag_name": "v19.03.9",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.9",
+    "assets": []
+  },
+  "v19.03.8": {
+    "id": 25372883,
+    "tag_name": "v19.03.8",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.8",
+    "assets": []
+  },
+  "v17.03.2-ce": {
+    "id": 6858533,
+    "tag_name": "v17.03.2-ce",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.03.2-ce",
+    "assets": []
+  },
+  "v17.03.2-ce-rc1": {
+    "id": 6547028,
+    "tag_name": "v17.03.2-ce-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.03.2-ce-rc1",
+    "assets": []
+  },
+  "v17.05.0-ce": {
+    "id": 6295254,
+    "tag_name": "v17.05.0-ce",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.05.0-ce",
+    "assets": []
+  },
+  "v17.05.0-ce-rc3": {
+    "id": 6259851,
+    "tag_name": "v17.05.0-ce-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.05.0-ce-rc3",
+    "assets": []
+  },
+  "v17.05.0-ce-rc2": {
+    "id": 6216216,
+    "tag_name": "v17.05.0-ce-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.05.0-ce-rc2",
+    "assets": []
+  },
+  "v17.05.0-ce-rc1": {
+    "id": 6066291,
+    "tag_name": "v17.05.0-ce-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.05.0-ce-rc1",
+    "assets": []
+  },
+  "v17.04.0-ce": {
+    "id": 5992837,
+    "tag_name": "v17.04.0-ce",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.04.0-ce",
+    "assets": []
+  },
+  "v17.04.0-ce-rc2": {
+    "id": 5930499,
+    "tag_name": "v17.04.0-ce-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.04.0-ce-rc2",
+    "assets": []
+  },
+  "v17.03.1-ce": {
+    "id": 5889333,
+    "tag_name": "v17.03.1-ce",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.03.1-ce",
+    "assets": []
+  },
+  "v17.04.0-ce-rc1": {
+    "id": 5821903,
+    "tag_name": "v17.04.0-ce-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.04.0-ce-rc1",
+    "assets": []
+  },
+  "v17.03.1-ce-rc1": {
+    "id": 5787909,
+    "tag_name": "v17.03.1-ce-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.03.1-ce-rc1",
+    "assets": []
+  },
+  "v17.03.0-ce": {
+    "id": 5616072,
+    "tag_name": "v17.03.0-ce",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.03.0-ce",
+    "assets": []
+  },
+  "v17.03.0-ce-rc1": {
+    "id": 5516127,
+    "tag_name": "v17.03.0-ce-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.03.0-ce-rc1",
+    "assets": []
+  },
+  "v1.13.1": {
+    "id": 5400129,
+    "tag_name": "v1.13.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.1",
+    "assets": []
+  },
+  "v1.13.1-rc2": {
+    "id": 5385634,
+    "tag_name": "v1.13.1-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.1-rc2",
+    "assets": []
+  },
+  "v1.13.1-rc1": {
+    "id": 5307652,
+    "tag_name": "v1.13.1-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.1-rc1",
+    "assets": []
+  },
+  "v1.13.0": {
+    "id": 5196571,
+    "tag_name": "v1.13.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0",
+    "assets": []
+  },
+  "v1.13.0-rc7": {
+    "id": 5157693,
+    "tag_name": "v1.13.0-rc7",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc7",
+    "assets": []
+  },
+  "v1.13.0-rc6": {
+    "id": 5135134,
+    "tag_name": "v1.13.0-rc6",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc6",
+    "assets": []
+  },
+  "v1.12.6": {
+    "id": 5123890,
+    "tag_name": "v1.12.6",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.6",
+    "assets": []
+  },
+  "v1.13.0-rc5": {
+    "id": 5080578,
+    "tag_name": "v1.13.0-rc5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc5",
+    "assets": []
+  },
+  "v1.13.0-rc4": {
+    "id": 4948866,
+    "tag_name": "v1.13.0-rc4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc4",
+    "assets": []
+  },
+  "v1.12.5": {
+    "id": 4938198,
+    "tag_name": "v1.12.5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.5",
+    "assets": []
+  },
+  "v1.12.5-rc1": {
+    "id": 4926422,
+    "tag_name": "v1.12.5-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.5-rc1",
+    "assets": []
+  },
+  "v1.12.4": {
+    "id": 4901878,
+    "tag_name": "v1.12.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.4",
+    "assets": []
+  },
+  "v1.12.4-rc1": {
+    "id": 4863914,
+    "tag_name": "v1.12.4-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.4-rc1",
+    "assets": []
+  },
+  "v1.13.0-rc3": {
+    "id": 4840704,
+    "tag_name": "v1.13.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc3",
+    "assets": []
+  },
+  "v1.13.0-rc2": {
+    "id": 4744761,
+    "tag_name": "v1.13.0-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc2",
+    "assets": []
+  },
+  "v1.13.0-rc1": {
+    "id": 4641203,
+    "tag_name": "v1.13.0-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc1",
+    "assets": []
+  },
+  "v1.12.3": {
+    "id": 4495222,
+    "tag_name": "v1.12.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.3",
+    "assets": []
+  },
+  "v1.12.3-rc1": {
+    "id": 4481016,
+    "tag_name": "v1.12.3-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.3-rc1",
+    "assets": []
+  },
+  "v1.12.2": {
+    "id": 4364345,
+    "tag_name": "v1.12.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.2",
+    "assets": []
+  },
+  "v1.12.2-rc3": {
+    "id": 4336430,
+    "tag_name": "v1.12.2-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.2-rc3",
+    "assets": []
+  },
+  "v1.12.2-rc2": {
+    "id": 4304701,
+    "tag_name": "v1.12.2-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.2-rc2",
+    "assets": []
+  },
+  "v1.12.2-rc1": {
+    "id": 4246481,
+    "tag_name": "v1.12.2-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.2-rc1",
+    "assets": []
+  },
+  "v1.12.1": {
+    "id": 3919520,
+    "tag_name": "v1.12.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.1",
+    "assets": []
+  },
+  "v1.12.1-rc2": {
+    "id": 3909470,
+    "tag_name": "v1.12.1-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.1-rc2",
+    "assets": []
+  },
+  "v1.12.1-rc1": {
+    "id": 3879305,
+    "tag_name": "v1.12.1-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.1-rc1",
+    "assets": []
+  },
+  "v1.12.0": {
+    "id": 3766135,
+    "tag_name": "v1.12.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.0",
+    "assets": []
+  },
+  "v1.12.0-rc5": {
+    "id": 3744904,
+    "tag_name": "v1.12.0-rc5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.0-rc5",
+    "assets": []
+  },
+  "v1.12.0-rc4": {
+    "id": 3644623,
+    "tag_name": "v1.12.0-rc4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.0-rc4",
+    "assets": []
+  },
+  "v1.12.0-rc3": {
+    "id": 3573896,
+    "tag_name": "v1.12.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.0-rc3",
+    "assets": []
+  },
+  "v1.12.0-rc2": {
+    "id": 3471944,
+    "tag_name": "v1.12.0-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.0-rc2",
+    "assets": []
+  },
+  "v1.12.0-rc1": {
+    "id": 3447699,
+    "tag_name": "v1.12.0-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.0-rc1",
+    "assets": []
+  },
+  "v1.11.2": {
+    "id": 3354503,
+    "tag_name": "v1.11.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.2",
+    "assets": []
+  },
+  "v1.11.2-rc1": {
+    "id": 3327300,
+    "tag_name": "v1.11.2-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.2-rc1",
+    "assets": []
+  },
+  "v1.11.1": {
+    "id": 3105125,
+    "tag_name": "v1.11.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.1",
+    "assets": []
+  },
+  "v1.11.1-rc1": {
+    "id": 3097597,
+    "tag_name": "v1.11.1-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.1-rc1",
+    "assets": []
+  },
+  "v1.11.0": {
+    "id": 3014278,
+    "tag_name": "v1.11.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.0",
+    "assets": []
+  },
+  "v1.11.0-rc5": {
+    "id": 2998258,
+    "tag_name": "v1.11.0-rc5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.0-rc5",
+    "assets": []
+  },
+  "v1.11.0-rc4": {
+    "id": 2968912,
+    "tag_name": "v1.11.0-rc4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.0-rc4",
+    "assets": []
+  },
+  "v1.11.0-rc3": {
+    "id": 2937939,
+    "tag_name": "v1.11.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.0-rc3",
+    "assets": []
+  },
+  "v1.11.0-rc2": {
+    "id": 2890861,
+    "tag_name": "v1.11.0-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.0-rc2",
+    "assets": []
+  },
+  "v1.11.0-rc1": {
+    "id": 2875983,
+    "tag_name": "v1.11.0-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.0-rc1",
+    "assets": []
+  },
+  "v1.10.3": {
+    "id": 2788494,
+    "tag_name": "v1.10.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.3",
+    "assets": []
+  },
+  "v1.10.3-rc2": {
+    "id": 2780060,
+    "tag_name": "v1.10.3-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.3-rc2",
+    "assets": []
+  },
+  "v1.10.3-rc1": {
+    "id": 2777835,
+    "tag_name": "v1.10.3-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.3-rc1",
+    "assets": []
+  },
+  "v1.10.2": {
+    "id": 2666504,
+    "tag_name": "v1.10.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.2",
+    "assets": []
+  },
+  "v1.10.2-rc1": {
+    "id": 2652399,
+    "tag_name": "v1.10.2-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.2-rc1",
+    "assets": []
+  },
+  "v1.10.1": {
+    "id": 2598018,
+    "tag_name": "v1.10.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.1",
+    "assets": []
+  },
+  "v1.10.1-rc1": {
+    "id": 2590708,
+    "tag_name": "v1.10.1-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.1-rc1",
+    "assets": []
+  },
+  "v1.10.0": {
+    "id": 2555659,
+    "tag_name": "v1.10.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.0",
+    "assets": []
+  },
+  "v1.10.0-rc4": {
+    "id": 2549294,
+    "tag_name": "v1.10.0-rc4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.0-rc4",
+    "assets": []
+  },
+  "v1.10.0-rc3": {
+    "id": 2541607,
+    "tag_name": "v1.10.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.0-rc3",
+    "assets": []
+  },
+  "v1.10.0-rc2": {
+    "id": 2505382,
+    "tag_name": "v1.10.0-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.0-rc2",
+    "assets": []
+  },
+  "v1.10.0-rc1": {
+    "id": 2437435,
+    "tag_name": "v1.10.0-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.0-rc1",
+    "assets": []
+  },
+  "v1.9.1": {
+    "id": 2161885,
+    "tag_name": "v1.9.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.1",
+    "assets": []
+  },
+  "v1.9.1-rc1": {
+    "id": 2124307,
+    "tag_name": "v1.9.1-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.1-rc1",
+    "assets": []
+  },
+  "v1.9.0": {
+    "id": 2065556,
+    "tag_name": "v1.9.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.0",
+    "assets": []
+  },
+  "v1.9.0-rc5": {
+    "id": 2063038,
+    "tag_name": "v1.9.0-rc5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.0-rc5",
+    "assets": []
+  },
+  "v1.9.0-rc4": {
+    "id": 2051407,
+    "tag_name": "v1.9.0-rc4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.0-rc4",
+    "assets": []
+  },
+  "v1.9.0-rc3": {
+    "id": 2030176,
+    "tag_name": "v1.9.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.0-rc3",
+    "assets": []
+  },
+  "v1.9.0-rc2": {
+    "id": 2006252,
+    "tag_name": "v1.9.0-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.0-rc2",
+    "assets": []
+  },
+  "v1.9.0-rc1": {
+    "id": 1960642,
+    "tag_name": "v1.9.0-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.0-rc1",
+    "assets": []
+  },
+  "v1.8.3": {
+    "id": 1948004,
+    "tag_name": "v1.8.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.8.3",
+    "assets": []
+  },
+  "v1.8.2": {
+    "id": 1796575,
+    "tag_name": "v1.8.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.8.2",
+    "assets": []
+  },
+  "v1.8.2-rc1": {
+    "id": 1765231,
+    "tag_name": "v1.8.2-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.8.2-rc1",
+    "assets": []
+  },
+  "v1.8.1": {
+    "id": 1665370,
+    "tag_name": "v1.8.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.8.1",
+    "assets": []
+  },
+  "v1.8.0": {
+    "id": 1657439,
+    "tag_name": "v1.8.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.8.0",
+    "assets": []
+  },
+  "v1.8.0-rc3": {
+    "id": 1643499,
+    "tag_name": "v1.8.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.8.0-rc3",
+    "assets": []
+  }
+}
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -0,0 +1,26 @@
+name: build
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+on:
+  push:
+    branches:
+      - 'main'
+  pull_request:
+    paths-ignore:
+      - '.github/*-releases.json'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
+      -
+        name: Build
+        uses: docker/bake-action@v4
+        with:
+          targets: build
--- a/.github/workflows/buildx-lab-releases-json.yml
+++ b/.github/workflows/buildx-lab-releases-json.yml
@@ -0,0 +1,58 @@
+name: buildx-lab-releases-json
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 */12 * * *'
+  push:
+    branches:
+      - 'main'
+  pull_request:
+    paths-ignore:
+      - '.github/*-releases.json'
+
+jobs:
+  generate:
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@6dc31870ca6c4f8489bf5a408ab38fae60f47eec
+    with:
+      repository: docker/buildx-desktop
+      artifact_name: buildx-lab-releases-json
+      filename: buildx-lab-releases.json
+    secrets: inherit
+
+  open-pr:
+    runs-on: ubuntu-22.04
+    if: github.event_name != 'pull_request'
+    needs:
+      - generate
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
+      -
+        name: Download
+        uses: actions/download-artifact@v3
+        with:
+          name: buildx-lab-releases-json
+          path: .github
+      -
+        name: Commit changes
+        run: |
+          git add -A .
+      -
+        name: Create PR
+        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38
+        with:
+          base: main
+          branch: bot/buildx-lab-releases-json
+          commit-message: "github: update .github/buildx-lab-releases.json"
+          signoff: true
+          delete-branch: true
+          title: "Update `.github/buildx-lab-releases.json`"
+          body: |
+            Update `.github/buildx-lab-releases.json` to keep in sync with [https://github.com/docker/buildx-desktop](https://github.com/docker/buildx-desktop).
+          draft: false
--- a/.github/workflows/buildx-releases-json.yml
+++ b/.github/workflows/buildx-releases-json.yml
@@ -13,47 +13,46 @@ on:
      - 'main'
  pull_request:
    paths-ignore:
-      - '.github/buildx-releases.json'
+      - '.github/*-releases.json'

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2a596c917a8ad3e6203ae99b777148525a2e00d5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@6dc31870ca6c4f8489bf5a408ab38fae60f47eec
    with:
      repository: docker/buildx
      artifact_name: buildx-releases-json
      filename: buildx-releases.json
    secrets: inherit

-# FIXME: Uncomment when repo public
-#  open-pr:
-#    runs-on: ubuntu-22.04
-#    if: github.event_name != 'pull_request'
-#    needs:
-#      - generate
-#    steps:
-#      -
-#        name: Checkout
-#        uses: actions/checkout@v3
-#      -
-#        name: Download
-#        uses: actions/download-artifact@v3
-#        with:
-#          name: buildx-releases-json
-#          path: .github
-#      -
-#        name: Commit changes
-#        run: |
-#          git add -A .
-#      -
-#        name: Create PR
-#        uses: peter-evans/create-pull-request@2b011faafdcbc9ceb11414d64d0573f37c774b04
-#        with:
-#          base: master
-#          branch: bot/buildx-releases-json
-#          commit-message: "github: update .github/buildx-releases.json"
-#          signoff: true
-#          delete-branch: true
-#          title: "Update `.github/buildx-releases.json`"
-#          body: |
-#            Update `.github/buildx-releases.json` to keep in sync with [https://github.com/docker/buildx](https://github.com/docker/buildx).
-#          draft: false
+  open-pr:
+    runs-on: ubuntu-22.04
+    if: github.event_name != 'pull_request'
+    needs:
+      - generate
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
+      -
+        name: Download
+        uses: actions/download-artifact@v3
+        with:
+          name: buildx-releases-json
+          path: .github
+      -
+        name: Commit changes
+        run: |
+          git add -A .
+      -
+        name: Create PR
+        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38
+        with:
+          base: main
+          branch: bot/buildx-releases-json
+          commit-message: "github: update .github/buildx-releases.json"
+          signoff: true
+          delete-branch: true
+          title: "Update `.github/buildx-releases.json`"
+          body: |
+            Update `.github/buildx-releases.json` to keep in sync with [https://github.com/docker/buildx](https://github.com/docker/buildx).
+          draft: false
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,41 @@
+name: codeql
+
+on:
+  push:
+    branches:
+      - 'main'
+  pull_request:
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+env:
+  NODE_VERSION: 20
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
+      -
+        name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+      -
+        name: Initialize CodeQL
+        uses: github/codeql-action/init@v2
+        with:
+          languages: javascript-typescript
+      -
+        name: Autobuild
+        uses: github/codeql-action/autobuild@v2
+      -
+        name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v2
+        with:
+          category: "/language:javascript-typescript"
--- a/.github/workflows/docker-releases-json.yml
+++ b/.github/workflows/docker-releases-json.yml
@@ -0,0 +1,58 @@
+name: docker-releases-json
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 */12 * * *'
+  push:
+    branches:
+      - 'main'
+  pull_request:
+    paths-ignore:
+      - '.github/*-releases.json'
+
+jobs:
+  generate:
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@6dc31870ca6c4f8489bf5a408ab38fae60f47eec
+    with:
+      repository: moby/moby
+      artifact_name: docker-releases-json
+      filename: docker-releases.json
+    secrets: inherit
+
+  open-pr:
+    runs-on: ubuntu-22.04
+    if: github.event_name != 'pull_request'
+    needs:
+      - generate
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
+      -
+        name: Download
+        uses: actions/download-artifact@v3
+        with:
+          name: docker-releases-json
+          path: .github
+      -
+        name: Commit changes
+        run: |
+          git add -A .
+      -
+        name: Create PR
+        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38
+        with:
+          base: main
+          branch: bot/docker-releases-json
+          commit-message: "github: update .github/docker-releases.json"
+          signoff: true
+          delete-branch: true
+          title: "Update `.github/docker-releases.json`"
+          body: |
+            Update `.github/docker-releases.json` to keep in sync with [https://github.com/moby/moby](https://github.com/moby/moby).
+          draft: false
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,5 +1,9 @@
 name: publish

+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 on:
  push:
    tags:
@@ -11,13 +15,13 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
      -
        name: Publish
-        uses: docker/bake-action@v2
+        uses: docker/bake-action@v4
        with:
          targets: publish
        env:
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,48 +1,114 @@
 name: test

+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 on:
+  workflow_dispatch:
  push:
    branches:
      - 'main'
  pull_request:
    paths-ignore:
-      - '.github/buildx-releases.json'
+      - '.github/*-releases.json'
+
+env:
+  NODE_VERSION: "20"

 jobs:
-  validate:
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        target:
-          - lint
-          - vendor-validate
-          - license-validate
-    steps:
-      -
-        name: Checkout
-        uses: actions/checkout@v3
-      -
-        name: Validate
-        uses: docker/bake-action@v2
-        with:
-          targets: ${{ matrix.target }}
-
  test:
    runs-on: ubuntu-latest
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
      -
        name: Test
-        uses: docker/bake-action@v2
+        uses: docker/bake-action@v4
        with:
          targets: test-coverage
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-#      -
-#        name: Upload coverage
-#        uses: codecov/codecov-action@v3
-#        with:
-#          file: ./coverage/clover.xml
+      -
+        name: Upload coverage
+        uses: codecov/codecov-action@v3
+        with:
+          file: ./coverage/clover.xml
+          flags: unit
+
+  prepare-itg:
+    runs-on: ubuntu-latest
+    outputs:
+      matrix: ${{ steps.tests.outputs.matrix }}
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
+      -
+        name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'yarn'
+      -
+        name: Install
+        run: yarn install
+      -
+        name: Create matrix
+        id: tests
+        run: |
+          declare -a tests
+          for test in $(yarn run test:itg-list); do
+            tests+=("${test#$(pwd)/__tests__/}")
+          done
+          echo "matrix=$(echo ${tests[@]} | jq -cR 'split(" ")')" >>${GITHUB_OUTPUT}
+      -
+        name: Show matrix
+        run: |
+          echo ${{ steps.tests.outputs.matrix }}
+
+  test-itg:
+    runs-on: ${{ matrix.os }}
+    needs:
+      - prepare-itg
+    strategy:
+      fail-fast: false
+      matrix:
+        test: ${{ fromJson(needs.prepare-itg.outputs.matrix) }}
+        os:
+          - ubuntu-latest
+          - macos-13
+          - macos-latest
+          - windows-latest
+        exclude:
+          - os: macos-13
+            test: buildx/bake.test.itg.ts
+          - os: macos-latest
+            test: buildx/bake.test.itg.ts
+          - os: windows-latest
+            test: buildx/bake.test.itg.ts
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
+      -
+        name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'yarn'
+      -
+        name: Install
+        run: yarn install
+      -
+        name: Test
+        run: yarn test:itg-coverage --runTestsByPath __tests__/${{ matrix.test }} --coverageDirectory=./coverage
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      -
+        name: Upload coverage
+        uses: codecov/codecov-action@v3
+        with:
+          file: ./coverage/clover.xml
+          flags: itg
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -0,0 +1,47 @@
+name: validate
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'main'
+  pull_request:
+    paths-ignore:
+      - '.github/*-releases.json'
+
+jobs:
+  prepare:
+    runs-on: ubuntu-20.04
+    outputs:
+      targets: ${{ steps.targets.outputs.matrix }}
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
+      -
+        name: Matrix
+        id: targets
+        run: |
+          echo "matrix=$(docker buildx bake validate --print | jq -cr '.group.validate.targets')" >> $GITHUB_OUTPUT
+
+  validate:
+    runs-on: ubuntu-latest
+    needs:
+      - prepare
+    strategy:
+      fail-fast: false
+      matrix:
+        target: ${{ fromJson(needs.prepare.outputs.targets) }}
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v4
+      -
+        name: Validate
+        uses: docker/bake-action@v4
+        with:
+          targets: ${{ matrix.target }}
--- a/.github/workflows/virtual-env.yml
+++ b/.github/workflows/virtual-env.yml
@@ -23,7 +23,6 @@ jobs:
          - ubuntu-latest
          - ubuntu-22.04
          - ubuntu-20.04
-          - ubuntu-18.04
    steps:
      -
        name: File system
@@ -67,4 +66,4 @@ jobs:
      -
        name: Dump context
        if: always()
-        uses: crazy-max/ghaction-dump-context@v1
+        uses: crazy-max/ghaction-dump-context@v2
--- a/.prettierignore
+++ b/.prettierignore
@@ -1,6 +1,9 @@
 # Dependency directories
-node_modules/
-jspm_packages/
+/node_modules/**
+/jspm_packages/**

 # yarn v2
-.yarn/
+/.yarn/**
+
+# build
+/lib/**
--- a/.yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
+++ b/.yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
--- a/.yarn/releases/yarn-3.3.1.cjs
+++ b/.yarn/releases/yarn-3.3.1.cjs
--- a/.yarn/releases/yarn-3.6.3.cjs
+++ b/.yarn/releases/yarn-3.6.3.cjs
--- a/.yarnrc.yml
+++ b/.yarnrc.yml
@@ -1,7 +1,15 @@
+logFilters:
+  - code: YN0013
+    level: discard
+  - code: YN0076
+    level: discard
+
 nodeLinker: node-modules

+npmAuthToken: "${NODE_AUTH_TOKEN:-fallback}"
+
 plugins:
  - path: .yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
    spec: "@yarnpkg/plugin-interactive-tools"

-yarnPath: .yarn/releases/yarn-3.3.1.cjs
+yarnPath: .yarn/releases/yarn-3.6.3.cjs
--- a/README.md
+++ b/README.md
@@ -1,3 +1,10 @@
+[![Version](https://img.shields.io/npm/v/@docker/actions-toolkit?label=version&logo=npm&style=flat-square)](https://www.npmjs.com/package/@docker/actions-toolkit)
+[![Downloads](https://img.shields.io/npm/dw/@docker/actions-toolkit?logo=npm&style=flat-square)](https://www.npmjs.com/package/@docker/actions-toolkit)
+[![Build workflow](https://img.shields.io/github/actions/workflow/status/docker/actions-toolkit/build.yml?label=build&logo=github&style=flat-square)](https://github.com/docker/actions-toolkit/actions?workflow=build)
+[![Test workflow](https://img.shields.io/github/actions/workflow/status/docker/actions-toolkit/test.yml?label=test&logo=github&style=flat-square)](https://github.com/docker/actions-toolkit/actions?workflow=test)
+[![Validate workflow](https://img.shields.io/github/actions/workflow/status/docker/actions-toolkit/validate.yml?label=validate&logo=github&style=flat-square)](https://github.com/docker/actions-toolkit/actions?workflow=validate)
+[![Codecov](https://img.shields.io/codecov/c/github/docker/actions-toolkit?logo=codecov&style=flat-square)](https://codecov.io/gh/docker/actions-toolkit)
+
 # Actions Toolkit

 Toolkit for Docker (GitHub) Actions.
@@ -34,7 +41,7 @@ $ npm install @docker/actions-toolkit
 ## Usage

 ```js
-const { Toolkit } = require('@docker/actions-toolkit')
+const { Toolkit } = require('@docker/actions-toolkit/lib/toolkit')
 const toolkit = new Toolkit()
 ```

--- a/tests/builder.test.ts
+++ b/tests/builder.test.ts
@@ -1,201 +0,0 @@
-/**
- * Copyright 2023 actions-toolkit authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import {beforeEach, describe, expect, it, jest, test} from '@jest/globals';
-import * as fs from 'fs';
-import * as path from 'path';
-
-import {Builder, BuilderInfo} from '../src/builder';
-import {Context} from '../src/context';
-
-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
-jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<BuilderInfo> => {
-  return {
-    name: 'builder2',
-    driver: 'docker-container',
-    lastActivity: new Date('2023-01-16 09:45:23 +0000 UTC'),
-    nodes: [
-      {
-        buildkitVersion: 'v0.11.0',
-        buildkitdFlags: '--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host',
-        driverOpts: ['BUILDKIT_STEP_LOG_MAX_SIZE=10485760', 'BUILDKIT_STEP_LOG_MAX_SPEED=10485760', 'JAEGER_TRACE=localhost:6831', 'image=moby/buildkit:latest', 'network=host'],
-        endpoint: 'unix:///var/run/docker.sock',
-        name: 'builder20',
-        platforms: 'linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/mips64le,linux/mips64,linux/arm/v7,linux/arm/v6',
-        status: 'running'
-      }
-    ]
-  };
-});
-
-describe('inspect', () => {
-  it('valid', async () => {
-    const builder = new Builder({
-      context: new Context()
-    });
-    const builderInfo = await builder.inspect('');
-    expect(builderInfo).not.toBeUndefined();
-    expect(builderInfo.name).not.toEqual('');
-    expect(builderInfo.driver).not.toEqual('');
-    expect(builderInfo.nodes).not.toEqual({});
-  }, 100000);
-});
-
-describe('parseInspect', () => {
-  // prettier-ignore
-  test.each([
-    [
-     'inspect1.txt',
-     {
-       "name": "builder-5cb467f7-0940-47e1-b94b-d51f54054d62",
-       "driver": "docker-container",
-       "nodes": [
-         {
-           "name": "builder-5cb467f7-0940-47e1-b94b-d51f54054d620",
-           "endpoint": "unix:///var/run/docker.sock",
-           "status": "running",
-           "buildkitdFlags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
-           "buildkitVersion": "v0.10.4",
-           "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/amd64/v4,linux/arm64,linux/riscv64,linux/386,linux/arm/v7,linux/arm/v6"
-         }
-       ]
-     }
-    ],
-    [
-     'inspect2.txt',
-     {
-       "name": "builder-5f449644-ff29-48af-8344-abb0292d0673",
-       "driver": "docker-container",
-       "nodes": [
-         {
-           "name": "builder-5f449644-ff29-48af-8344-abb0292d06730",
-           "endpoint": "unix:///var/run/docker.sock",
-           "driverOpts": [
-             "image=moby/buildkit:latest"
-           ],
-           "status": "running",
-           "buildkitdFlags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
-           "buildkitVersion": "v0.10.4",
-           "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/amd64/v4,linux/386"
-         }
-       ]
-     }
-    ],
-    [
-     'inspect3.txt',
-     {
-       "name": "builder-9929e463-7954-4dc3-89cd-514cca29ff80",
-       "driver": "docker-container",
-       "nodes": [
-         {
-           "name": "builder-9929e463-7954-4dc3-89cd-514cca29ff800",
-           "endpoint": "unix:///var/run/docker.sock",
-           "driverOpts": [
-             "image=moby/buildkit:master",
-             "network=host"
-           ],
-           "status": "running",
-           "buildkitdFlags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
-           "buildkitVersion": "3fab389",
-           "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/amd64/v4,linux/386"
-         }
-       ]
-     }
-    ],
-    [
-     'inspect4.txt',
-     {
-       "name": "default",
-       "driver": "docker",
-       "nodes": [
-         {
-           "name": "default",
-           "endpoint": "default",
-           "status": "running",
-           "buildkitVersion": "20.10.17",
-           "platforms": "linux/amd64,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/arm/v7,linux/arm/v6"
-         }
-       ]
-     }
-    ],
-    [
-     'inspect5.txt',
-     {
-       "name": "remote-builder",
-       "driver": "remote",
-       "nodes": [
-         {
-           "name": "aws_graviton2",
-           "endpoint": "tcp://1.23.45.67:1234",
-           "driverOpts": [
-             "cert=/home/user/.certs/aws_graviton2/cert.pem",
-             "key=/home/user/.certs/aws_graviton2/key.pem",
-             "cacert=/home/user/.certs/aws_graviton2/ca.pem"
-           ],
-           "status": "running",
-           "platforms": "darwin/arm64,linux/arm64,linux/arm/v5,linux/arm/v6,linux/arm/v7,windows/arm64"
-         }
-       ]
-     }
-    ],
-    [
-     'inspect6.txt',
-     {
-       "nodes": [
-         {
-           "name": "builder-17cfff01-48d9-4c3d-9332-9992e308a5100",
-           "endpoint": "unix:///var/run/docker.sock",
-           "status": "running",
-           "buildkitdFlags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
-           "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/386"
-         }
-       ],
-       "name": "builder-17cfff01-48d9-4c3d-9332-9992e308a510",
-       "driver": "docker-container"
-     }
-    ],
-    [
-     'inspect7.txt',
-     {
-       "name": "builder2",
-       "driver": "docker-container",
-       "lastActivity": new Date("2023-01-16T09:45:23.000Z"),
-       "nodes": [
-         {
-           "buildkitVersion": "v0.11.0",
-           "buildkitdFlags": "--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
-           "driverOpts": [
-             "BUILDKIT_STEP_LOG_MAX_SIZE=10485760",
-             "BUILDKIT_STEP_LOG_MAX_SPEED=10485760",
-             "JAEGER_TRACE=localhost:6831",
-             "image=moby/buildkit:latest",
-             "network=host"
-           ],
-           "endpoint": "unix:///var/run/docker.sock",
-           "name": "builder20",
-           "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/mips64le,linux/mips64,linux/arm/v7,linux/arm/v6",
-           "status": "running"
-         }
-       ]
-     }
-    ]
-  ])('given %p', async (inspectFile, expected) => {
-    expect(await Builder.parseInspect(fs.readFileSync(path.join(__dirname, 'fixtures', inspectFile)).toString())).toEqual(expected);
-  });
-});
--- a/tests/buildkit.test.ts
+++ b/tests/buildkit.test.ts
@@ -1,121 +0,0 @@
-/**
- * Copyright 2023 actions-toolkit authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import {describe, expect, it, jest, test, beforeEach, afterEach} from '@jest/globals';
-import * as fs from 'fs';
-import * as path from 'path';
-import rimraf from 'rimraf';
-import * as semver from 'semver';
-
-import {BuildKit} from '../src/buildkit';
-import {Builder, BuilderInfo} from '../src/builder';
-import {Context} from '../src/context';
-
-const tmpDir = path.join('/tmp/.docker-actions-toolkit-jest').split(path.sep).join(path.posix.sep);
-const tmpName = path.join(tmpDir, '.tmpname-jest').split(path.sep).join(path.posix.sep);
-
-jest.spyOn(Context.prototype as any, 'tmpDir').mockImplementation((): string => {
-  if (!fs.existsSync(tmpDir)) {
-    fs.mkdirSync(tmpDir, {recursive: true});
-  }
-  return tmpDir;
-});
-jest.spyOn(Context.prototype as any, 'tmpName').mockImplementation((): string => {
-  return tmpName;
-});
-
-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
-afterEach(() => {
-  rimraf.sync(tmpDir);
-});
-
-jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<BuilderInfo> => {
-  return {
-    name: 'builder2',
-    driver: 'docker-container',
-    lastActivity: new Date('2023-01-16 09:45:23 +0000 UTC'),
-    nodes: [
-      {
-        buildkitVersion: 'v0.11.0',
-        buildkitdFlags: '--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host',
-        driverOpts: ['BUILDKIT_STEP_LOG_MAX_SIZE=10485760', 'BUILDKIT_STEP_LOG_MAX_SPEED=10485760', 'JAEGER_TRACE=localhost:6831', 'image=moby/buildkit:latest', 'network=host'],
-        endpoint: 'unix:///var/run/docker.sock',
-        name: 'builder20',
-        platforms: 'linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/mips64le,linux/mips64,linux/arm/v7,linux/arm/v6',
-        status: 'running'
-      }
-    ]
-  };
-});
-
-describe('getVersion', () => {
-  it('valid', async () => {
-    const buildkit = new BuildKit({
-      context: new Context()
-    });
-    const version = await buildkit.getVersion('builder2');
-    expect(semver.valid(version)).not.toBeNull();
-  });
-});
-
-describe('satisfies', () => {
-  test.each([
-    ['builder2', '>=0.10.0', true],
-    ['builder2', '>0.11.0', false]
-  ])('given %p', async (builderName, range, expected) => {
-    const buildkit = new BuildKit({
-      context: new Context()
-    });
-    expect(await buildkit.versionSatisfies(builderName, range)).toBe(expected);
-  });
-});
-
-describe('generateConfig', () => {
-  test.each([
-    ['debug = true', false, 'debug = true', null],
-    [`notfound.toml`, true, '', new Error('config file notfound.toml not found')],
-    [
-      `${path.join(__dirname, 'fixtures', 'buildkitd.toml').split(path.sep).join(path.posix.sep)}`,
-      true,
-      `debug = true
-[registry."docker.io"]
-  mirrors = ["mirror.gcr.io"]
-`,
-      null
-    ]
-  ])('given %p config', async (val, file, exValue, error: Error) => {
-    try {
-      const buildkit = new BuildKit({
-        context: new Context()
-      });
-      let config: string;
-      if (file) {
-        config = buildkit.generateConfigFile(val);
-      } else {
-        config = buildkit.generateConfigInline(val);
-      }
-      expect(config).toEqual(tmpName);
-      const configValue = fs.readFileSync(tmpName, 'utf-8');
-      expect(configValue).toEqual(exValue);
-    } catch (e) {
-      // eslint-disable-next-line jest/no-conditional-expect
-      expect(e.message).toEqual(error?.message);
-    }
-  });
-});
--- a/tests/buildkit/buildkit.test.ts
+++ b/tests/buildkit/buildkit.test.ts
@@ -0,0 +1,65 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {beforeEach, describe, expect, it, jest, test} from '@jest/globals';
+
+import {BuildKit} from '../../src/buildkit/buildkit';
+import {Builder} from '../../src/buildx/builder';
+
+import {BuilderInfo} from '../../src/types/builder';
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<BuilderInfo> => {
+  return {
+    name: 'builder2',
+    driver: 'docker-container',
+    lastActivity: new Date('2023-01-16 09:45:23 +0000 UTC'),
+    nodes: [
+      {
+        buildkit: 'v0.11.0',
+        'buildkitd-flags': '--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host',
+        'driver-opts': ['BUILDKIT_STEP_LOG_MAX_SIZE=10485760', 'BUILDKIT_STEP_LOG_MAX_SPEED=10485760', 'JAEGER_TRACE=localhost:6831', 'image=moby/buildkit:latest', 'network=host'],
+        endpoint: 'unix:///var/run/docker.sock',
+        name: 'builder20',
+        platforms: 'linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/mips64le,linux/mips64,linux/arm/v7,linux/arm/v6',
+        status: 'running'
+      }
+    ]
+  };
+});
+
+describe('getVersion', () => {
+  it('valid', async () => {
+    const builder = new Builder();
+    const builderInfo = await builder.inspect('builder2');
+    const buildkit = new BuildKit();
+    const version = await buildkit.getVersion(builderInfo.nodes[0]);
+    expect(version).toBe('v0.11.0');
+  });
+});
+
+describe('satisfies', () => {
+  test.each([
+    ['builder2', '>=0.10.0', true],
+    ['builder2', '>0.11.0', false]
+  ])('given %p', async (builderName, range, expected) => {
+    const buildkit = new BuildKit();
+    expect(await buildkit.versionSatisfies(builderName, range)).toBe(expected);
+  });
+});
--- a/tests/buildkit/config.test.ts
+++ b/tests/buildkit/config.test.ts
@@ -0,0 +1,79 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, jest, test, beforeEach, afterEach} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as rimraf from 'rimraf';
+
+import {BuildKit} from '../../src/buildkit/buildkit';
+import {Context} from '../../src/context';
+
+const fixturesDir = path.join(__dirname, '..', 'fixtures');
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildkit-config-jest');
+const tmpName = path.join(tmpDir, '.tmpname-jest');
+
+jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
+  if (!fs.existsSync(tmpDir)) {
+    fs.mkdirSync(tmpDir, {recursive: true});
+  }
+  return tmpDir;
+});
+
+jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
+  return tmpName;
+});
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+afterEach(() => {
+  rimraf.sync(tmpDir);
+});
+
+describe('resolve', () => {
+  test.each([
+    ['debug = true', false, 'debug = true', null],
+    [`notfound.toml`, true, '', new Error('config file notfound.toml not found')],
+    [
+      `${path.join(fixturesDir, 'buildkitd.toml')}`,
+      true,
+      `debug = true
+[registry."docker.io"]
+  mirrors = ["mirror.gcr.io"]
+`,
+      null
+    ]
+  ])('given %p config', async (val: string, file: boolean, exValue: string, error: Error | null) => {
+    try {
+      const buildkit = new BuildKit();
+      let config: string;
+      if (file) {
+        config = buildkit.config.resolveFromFile(val);
+      } else {
+        config = buildkit.config.resolveFromString(val);
+      }
+      expect(config).toEqual(tmpName);
+      const configValue = fs.readFileSync(tmpName, 'utf-8');
+      expect(configValue).toEqual(exValue);
+    } catch (e) {
+      // eslint-disable-next-line jest/no-conditional-expect
+      expect(e.message).toEqual(error?.message);
+    }
+  });
+});
--- a/tests/buildx/bake.test.itg.ts
+++ b/tests/buildx/bake.test.itg.ts
@@ -0,0 +1,43 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {beforeEach, describe, expect, jest, test} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+
+import {Bake} from '../../src/buildx/bake';
+import {BakeDefinition} from '../../src/types/bake';
+
+const fixturesDir = path.join(__dirname, '..', 'fixtures');
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+describe('parseDefinitions', () => {
+  // prettier-ignore
+  test.each([
+    [
+      ['https://github.com/docker/buildx.git#v0.10.4'],
+      ['binaries-cross'],
+      path.join(fixturesDir, 'bake-buildx-0.10.4-binaries-cross.json')
+    ]
+  ])('given %p', async (sources: string[], targets: string[], out: string) => {
+    const bake = new Bake();
+    const expectedDef = <BakeDefinition>JSON.parse(fs.readFileSync(out, {encoding: 'utf-8'}).trim())
+    expect(await bake.parseDefinitions(sources, targets)).toEqual(expectedDef);
+  });
+});
--- a/tests/buildx/bake.test.ts
+++ b/tests/buildx/bake.test.ts
@@ -0,0 +1,430 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {beforeEach, describe, expect, jest, test} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+
+import {Bake} from '../../src/buildx/bake';
+import {BakeDefinition} from '../../src/types/bake';
+
+const fixturesDir = path.join(__dirname, '..', 'fixtures');
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+describe('parseDefinitions', () => {
+  // prettier-ignore
+  test.each([
+    [
+      [path.join(fixturesDir, 'bake-01.hcl')],
+      ['validate'],
+      [],
+      path.join(fixturesDir, 'bake-01-validate.json')
+    ],
+    [
+      [path.join(fixturesDir, 'bake-02.hcl')],
+      ['build'],
+      [],
+      path.join(fixturesDir, 'bake-02-build.json')
+    ],
+    [
+      [path.join(fixturesDir, 'bake-01.hcl')],
+      ['image'],
+      ['*.output=type=docker', '*.platform=linux/amd64'],
+      path.join(fixturesDir, 'bake-01-overrides.json')
+    ]
+  ])('given %p', async (sources: string[], targets: string[], overrides: string[], out: string) => {
+    const bake = new Bake();
+    const expectedDef = <BakeDefinition>JSON.parse(fs.readFileSync(out, {encoding: 'utf-8'}).trim())
+    expect(await bake.parseDefinitions(sources, targets, overrides)).toEqual(expectedDef);
+  });
+});
+
+describe('hasLocalExporter', () => {
+  // prettier-ignore
+  test.each([
+    [
+      {
+        "target": {
+          "build": {
+            "output": [
+              "type=docker"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "target": "build"
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              "type=local,dest=./release-out"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              "type=tar,dest=/tmp/image.tar"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              '"type=tar","dest=/tmp/image.tar"',
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              '" type= local" , dest=./release-out',
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              ".",
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ]
+  ])('given %o returns %p', async (def: BakeDefinition, expected: boolean) => {
+    expect(Bake.hasLocalExporter(def)).toEqual(expected);
+  });
+});
+
+describe('hasTarExporter', () => {
+  // prettier-ignore
+  test.each([
+    [
+      {
+        "target": {
+          "reg": {
+            "output": [
+              "type=registry,ref=user/app"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "output": [
+              "type=docker"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              "type=local,dest=./release-out"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              "type=tar,dest=/tmp/image.tar"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "multi": {
+            "output": [
+              "type=docker",
+              "type=tar,dest=/tmp/image.tar"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              '"type=tar","dest=/tmp/image.tar"',
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              '" type= local" , dest=./release-out',
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              ".",
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+  ])('given %o returns %p', async (def: BakeDefinition, expected: boolean) => {
+    expect(Bake.hasTarExporter(def)).toEqual(expected);
+  });
+});
+
+describe('hasDockerExporter', () => {
+  // prettier-ignore
+  test.each([
+    [
+      {
+        "target": {
+          "reg": {
+            "output": [
+              "type=registry,ref=user/app"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "output": [
+              "type=docker"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "multi": {
+            "output": [
+              "type=docker",
+              "type=tar,dest=/tmp/image.tar"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              '" type= local" , dest=./release-out'
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              "type=local,dest=./release-out"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              "type=tar,dest=/tmp/image.tar"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "multi": {
+            "output": [
+              "type=docker",
+              "type=tar,dest=/tmp/image.tar"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              '"type=tar","dest=/tmp/image.tar"'
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              '"type=tar","dest=/tmp/image.tar"'
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              '" type= local" , dest=./release-out'
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "output": [
+              "type=docker"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true,
+      false
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "output": [
+              "type=docker"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true,
+      true
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "output": [
+              "."
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true,
+      true
+    ],
+  ])('given %o and load:%p returns %p', async (def: BakeDefinition, expected: boolean, load: boolean | undefined) => {
+    expect(Bake.hasDockerExporter(def, load)).toEqual(expected);
+  });
+});
--- a/tests/buildx/builder.test.ts
+++ b/tests/buildx/builder.test.ts
@@ -0,0 +1,400 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {beforeEach, describe, expect, it, jest, test} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+
+import {Builder} from '../../src/buildx/builder';
+import {Exec} from '../../src/exec';
+
+import {BuilderInfo} from '../../src/types/builder';
+
+const fixturesDir = path.join(__dirname, '..', 'fixtures');
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<BuilderInfo> => {
+  return {
+    name: 'builder2',
+    driver: 'docker-container',
+    lastActivity: new Date('2023-01-16 09:45:23 +0000 UTC'),
+    nodes: [
+      {
+        buildkit: 'v0.11.0',
+        'buildkitd-flags': '--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host',
+        'driver-opts': ['BUILDKIT_STEP_LOG_MAX_SIZE=10485760', 'BUILDKIT_STEP_LOG_MAX_SPEED=10485760', 'JAEGER_TRACE=localhost:6831', 'image=moby/buildkit:latest', 'network=host', 'qemu.install=true'],
+        endpoint: 'unix:///var/run/docker.sock',
+        name: 'builder20',
+        platforms: 'linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/mips64le,linux/mips64,linux/arm/v7,linux/arm/v6',
+        status: 'running'
+      }
+    ]
+  };
+});
+
+describe('exists', () => {
+  it('valid', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const builder = new Builder();
+    await builder.exists('foo');
+    // eslint-disable-next-line jest/no-standalone-expect
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['buildx', 'inspect', 'foo'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+});
+
+describe('inspect', () => {
+  it('valid', async () => {
+    const builder = new Builder();
+    const builderInfo = await builder.inspect('');
+    expect(builderInfo).not.toBeUndefined();
+    expect(builderInfo.name).not.toEqual('');
+    expect(builderInfo.driver).not.toEqual('');
+    expect(builderInfo.nodes).not.toEqual({});
+  }, 100000);
+});
+
+describe('parseInspect', () => {
+  // prettier-ignore
+  test.each([
+    [
+     'inspect1.txt',
+     {
+       "name": "builder-5cb467f7-0940-47e1-b94b-d51f54054d62",
+       "driver": "docker-container",
+       "nodes": [
+         {
+           "name": "builder-5cb467f7-0940-47e1-b94b-d51f54054d620",
+           "endpoint": "unix:///var/run/docker.sock",
+           "status": "running",
+           "buildkitd-flags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
+           "buildkit": "v0.10.4",
+           "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/amd64/v4,linux/arm64,linux/riscv64,linux/386,linux/arm/v7,linux/arm/v6"
+         }
+       ]
+     }
+    ],
+    [
+     'inspect2.txt',
+     {
+       "name": "builder-5f449644-ff29-48af-8344-abb0292d0673",
+       "driver": "docker-container",
+       "nodes": [
+         {
+           "name": "builder-5f449644-ff29-48af-8344-abb0292d06730",
+           "endpoint": "unix:///var/run/docker.sock",
+           "driver-opts": [
+             "image=moby/buildkit:latest"
+           ],
+           "status": "running",
+           "buildkitd-flags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
+           "buildkit": "v0.10.4",
+           "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/amd64/v4,linux/386"
+         }
+       ]
+     }
+    ],
+    [
+     'inspect3.txt',
+     {
+       "name": "builder-9929e463-7954-4dc3-89cd-514cca29ff80",
+       "driver": "docker-container",
+       "nodes": [
+         {
+           "name": "builder-9929e463-7954-4dc3-89cd-514cca29ff800",
+           "endpoint": "unix:///var/run/docker.sock",
+           "driver-opts": [
+             "image=moby/buildkit:master",
+             "network=host"
+           ],
+           "status": "running",
+           "buildkitd-flags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
+           "buildkit": "3fab389",
+           "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/amd64/v4,linux/386"
+         }
+       ]
+     }
+    ],
+    [
+     'inspect4.txt',
+     {
+       "name": "default",
+       "driver": "docker",
+       "nodes": [
+         {
+           "name": "default",
+           "endpoint": "default",
+           "status": "running",
+           "buildkit": "20.10.17",
+           "platforms": "linux/amd64,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/arm/v7,linux/arm/v6"
+         }
+       ]
+     }
+    ],
+    [
+     'inspect5.txt',
+     {
+       "name": "remote-builder",
+       "driver": "remote",
+       "nodes": [
+         {
+           "name": "aws_graviton2",
+           "endpoint": "tcp://1.23.45.67:1234",
+           "driver-opts": [
+             "cert=/home/user/.certs/aws_graviton2/cert.pem",
+             "key=/home/user/.certs/aws_graviton2/key.pem",
+             "cacert=/home/user/.certs/aws_graviton2/ca.pem"
+           ],
+           "status": "running",
+           "platforms": "darwin/arm64,linux/arm64,linux/arm/v5,linux/arm/v6,linux/arm/v7,windows/arm64"
+         }
+       ]
+     }
+    ],
+    [
+     'inspect6.txt',
+     {
+       "nodes": [
+         {
+           "name": "builder-17cfff01-48d9-4c3d-9332-9992e308a5100",
+           "endpoint": "unix:///var/run/docker.sock",
+           "status": "running",
+           "buildkitd-flags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
+           "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/386"
+         }
+       ],
+       "name": "builder-17cfff01-48d9-4c3d-9332-9992e308a510",
+       "driver": "docker-container"
+     }
+    ],
+    [
+     'inspect7.txt',
+     {
+       "name": "builder2",
+       "driver": "docker-container",
+       "lastActivity": new Date("2023-01-16T09:45:23.000Z"),
+       "nodes": [
+         {
+           "buildkit": "v0.11.0",
+           "buildkitd-flags": "--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
+           "driver-opts": [
+             "env.BUILDKIT_STEP_LOG_MAX_SIZE=10485760",
+             "env.BUILDKIT_STEP_LOG_MAX_SPEED=10485760",
+             "env.JAEGER_TRACE=localhost:6831",
+             "image=moby/buildkit:latest",
+             "network=host",
+             "qemu.install=true"
+           ],
+           "endpoint": "unix:///var/run/docker.sock",
+           "name": "builder20",
+           "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/mips64le,linux/mips64,linux/arm/v7,linux/arm/v6",
+           "status": "running"
+         }
+       ]
+     }
+    ],
+    [
+     'inspect8.txt',
+     {
+       "name": "builder-52aa0611-faf0-42ac-a940-461e4e287d68",
+       "driver": "docker-container",
+       "lastActivity": new Date("2023-06-13T13:52:31.000Z"),
+       "nodes": [
+         {
+           "buildkit": "v0.11.6",
+           "buildkitd-flags": "--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
+           "driver-opts": [
+             "image=moby/buildkit:buildx-stable-1",
+             "network=host",
+           ],
+           "endpoint": "unix:///var/run/docker.sock",
+           "name": "builder-52aa0611-faf0-42ac-a940-461e4e287d680",
+           "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/amd64/v4,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/mips64le,linux/mips64,linux/arm/v7,linux/arm/v6",
+           "status": "running",
+           "labels": {
+             "org.mobyproject.buildkit.worker.executor": "oci",
+             "org.mobyproject.buildkit.worker.hostname": "fv-az572-38",
+             "org.mobyproject.buildkit.worker.network": "host",
+             "org.mobyproject.buildkit.worker.oci.process-mode": "sandbox",
+             "org.mobyproject.buildkit.worker.selinux.enabled": "false",
+             "org.mobyproject.buildkit.worker.snapshotter": "overlayfs",
+           },
+           "gcPolicy": [
+             {
+               "all": false,
+               "filter": [
+                 "type==source.local",
+                 "type==exec.cachemount",
+                 "type==source.git.checkout"
+               ],
+               "keepDuration": "48h0m0s",
+               "keepBytes": "488.3MiB",
+             },
+             {
+               "all": false,
+               "keepDuration": "1440h0m0s",
+               "keepBytes": "8.382GiB",
+             },
+             {
+               "all": false,
+               "keepBytes": "8.382GiB",
+             },
+             {
+               "all": true,
+               "keepBytes": "8.382GiB",
+             }
+           ]
+         }
+       ]
+     }
+    ],
+    [
+      'inspect9.txt',
+      {
+        "name": "default",
+        "driver": "docker",
+        "lastActivity": new Date("2023-06-13T18:13:43.000Z"),
+        "nodes": [
+          {
+            "buildkit": "v0.11.7-0.20230525183624-798ad6b0ce9f",
+            "endpoint": "default",
+            "name": "default",
+            "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/mips64le,linux/mips64,linux/arm/v7,linux/arm/v6",
+            "status": "running",
+            "gcPolicy": [
+              {
+                "all": true,
+                "keepBytes": "100GiB",
+              }
+            ]
+          }
+        ]
+      }
+    ],
+    [
+      'inspect10.txt',
+      {
+        "name": "remote-builder",
+        "driver": "remote",
+        "lastActivity": new Date("2023-04-20T12:47:49.000Z"),
+        "nodes": [
+          {
+            "name": "remote-builder0",
+            "endpoint": "docker-container://buildx_buildkit_dk-remote-builder0",
+            "status": "inactive"
+          },
+          {
+            "name": "aws_graviton2",
+            "endpoint": "tcp://10.0.0.1:1234",
+            "driver-opts": [
+              "cacert=/home/user/.certs/aws_graviton2/ca.pem",
+              "cert=/home/user/.certs/aws_graviton2/cert.pem",
+              "key=/home/user/.certs/aws_graviton2/key.pem"
+            ],
+            "status": "running",
+            "buildkit": "v0.11.6",
+            "platforms": "darwin/arm64,linux/arm64,linux/arm/v5,linux/arm/v6,linux/arm/v7,windows/arm64",
+            "labels": {
+              "org.mobyproject.buildkit.worker.executor": "oci",
+              "org.mobyproject.buildkit.worker.hostname": "77ebc22e2d82",
+              "org.mobyproject.buildkit.worker.network": "host",
+              "org.mobyproject.buildkit.worker.oci.process-mode": "sandbox",
+              "org.mobyproject.buildkit.worker.selinux.enabled": "false",
+              "org.mobyproject.buildkit.worker.snapshotter": "overlayfs"
+            },
+            "gcPolicy": [
+              {
+                "all": false,
+                "filter": [
+                  "type==source.local",
+                  "type==exec.cachemount",
+                  "type==source.git.checkout"
+                ],
+                "keepDuration": "48h0m0s",
+                "keepBytes": "488.3MiB"
+              },
+              {
+                "all": false,
+                "keepDuration": "1440h0m0s",
+                "keepBytes": "23.28GiB"
+              },
+              {
+                "all": false,
+                "keepBytes": "23.28GiB"
+              },
+              {
+                "all": true,
+                "keepBytes": "23.28GiB"
+              }
+            ]
+          },
+          {
+            "name": "linuxone_s390x",
+            "endpoint": "tcp://10.0.0.2:1234",
+            "driver-opts": [
+              "cacert=/home/user/.certs/linuxone_s390x/ca.pem",
+              "cert=/home/user/.certs/linuxone_s390x/cert.pem",
+              "key=/home/user/.certs/linuxone_s390x/key.pem"
+            ],
+            "status": "running",
+            "buildkit": "v0.11.6",
+            "platforms": "linux/s390x",
+            "labels": {
+              "org.mobyproject.buildkit.worker.executor": "oci",
+              "org.mobyproject.buildkit.worker.hostname": "9d0d62a96818",
+              "org.mobyproject.buildkit.worker.network": "host",
+              "org.mobyproject.buildkit.worker.oci.process-mode": "sandbox",
+              "org.mobyproject.buildkit.worker.selinux.enabled": "false",
+              "org.mobyproject.buildkit.worker.snapshotter": "overlayfs"
+            },
+            "gcPolicy": [
+              {
+                "all": false,
+                "keepBytes": "488.3MiB",
+                "filter": [
+                  "type==source.local",
+                  "type==exec.cachemount",
+                  "type==source.git.checkout"
+                ],
+                "keepDuration": "48h0m0s"
+              },
+              {
+                "all": false,
+                "keepDuration": "1440h0m0s",
+                "keepBytes": "9.313GiB"
+              },
+              {
+                "all": false,
+                "keepBytes": "9.313GiB"
+              },
+              {
+                "all": true,
+                "keepBytes": "9.313GiB"
+              }
+            ]
+          }
+        ],
+      }
+    ]
+  ])('given %p', async (inspectFile, expected) => {
+    expect(await Builder.parseInspect(fs.readFileSync(path.join(fixturesDir, inspectFile)).toString())).toEqual(expected);
+  });
+});
--- a/tests/buildx/buildx.test.ts
+++ b/tests/buildx/buildx.test.ts
@@ -0,0 +1,269 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, it, jest, test, beforeEach, afterEach} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as rimraf from 'rimraf';
+import * as semver from 'semver';
+
+import {Buildx} from '../../src/buildx/buildx';
+import {Context} from '../../src/context';
+import {Exec} from '../../src/exec';
+
+import {Cert} from '../../src/types/buildx';
+
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-jest');
+const tmpName = path.join(tmpDir, '.tmpname-jest');
+
+jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
+  if (!fs.existsSync(tmpDir)) {
+    fs.mkdirSync(tmpDir, {recursive: true});
+  }
+  return tmpDir;
+});
+
+jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
+  return tmpName;
+});
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+afterEach(() => {
+  rimraf.sync(tmpDir);
+});
+
+describe('configDir', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv,
+      BUILDX_CONFIG: '/var/docker/buildx',
+      DOCKER_CONFIG: '/var/docker/config'
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+  it('returns default', async () => {
+    process.env.BUILDX_CONFIG = '';
+    expect(Buildx.configDir).toEqual(path.join('/var/docker/config', 'buildx'));
+  });
+  it('returns from env', async () => {
+    expect(Buildx.configDir).toEqual('/var/docker/buildx');
+  });
+});
+
+describe('certsDir', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv,
+      BUILDX_CONFIG: '/var/docker/buildx'
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+  it('returns default', async () => {
+    process.env.BUILDX_CONFIG = '/var/docker/buildx';
+    expect(Buildx.certsDir).toEqual(path.join('/var/docker/buildx', 'certs'));
+  });
+});
+
+describe('isAvailable', () => {
+  it('docker cli', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const buildx = new Buildx({
+      standalone: false
+    });
+    await buildx.isAvailable();
+    // eslint-disable-next-line jest/no-standalone-expect
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['buildx'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+  it('standalone', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const buildx = new Buildx({
+      standalone: true
+    });
+    await buildx.isAvailable();
+    // eslint-disable-next-line jest/no-standalone-expect
+    expect(execSpy).toHaveBeenCalledWith(`buildx`, [], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+});
+
+describe('printInspect', () => {
+  it('prints builder2 instance', async () => {
+    const execSpy = jest.spyOn(Exec, 'exec');
+    const buildx = new Buildx({
+      standalone: true
+    });
+    await buildx.printInspect('builder2').catch(() => {
+      // noop
+    });
+    expect(execSpy).toHaveBeenCalledWith(`buildx`, ['inspect', 'builder2'], {
+      failOnStdErr: false
+    });
+  });
+});
+
+describe('printVersion', () => {
+  it('docker cli', async () => {
+    const execSpy = jest.spyOn(Exec, 'exec');
+    const buildx = new Buildx({
+      standalone: false
+    });
+    await buildx.printVersion();
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['buildx', 'version'], {
+      failOnStdErr: false
+    });
+  });
+  it('standalone', async () => {
+    const execSpy = jest.spyOn(Exec, 'exec');
+    const buildx = new Buildx({
+      standalone: true
+    });
+    await buildx.printVersion();
+    expect(execSpy).toHaveBeenCalledWith(`buildx`, ['version'], {
+      failOnStdErr: false
+    });
+  });
+});
+
+describe('version', () => {
+  it('valid', async () => {
+    const buildx = new Buildx();
+    expect(semver.valid(await buildx.version())).not.toBeUndefined();
+  });
+});
+
+describe('parseVersion', () => {
+  test.each([
+    ['github.com/docker/buildx 0.4.1+azure bda4882a65349ca359216b135896bddc1d92461c', '0.4.1'],
+    ['github.com/docker/buildx v0.4.1 bda4882a65349ca359216b135896bddc1d92461c', '0.4.1'],
+    ['github.com/docker/buildx v0.4.2 fb7b670b764764dc4716df3eba07ffdae4cc47b2', '0.4.2'],
+    ['github.com/docker/buildx f117971 f11797113e5a9b86bd976329c5dbb8a8bfdfadfa', 'f117971']
+  ])('given %p', async (stdout, expected) => {
+    expect(Buildx.parseVersion(stdout)).toEqual(expected);
+  });
+});
+
+describe('versionSatisfies', () => {
+  test.each([
+    ['0.4.1', '>=0.3.2', true],
+    ['bda4882a65349ca359216b135896bddc1d92461c', '>0.1.0', false],
+    ['f117971', '>0.6.0', true]
+  ])('given %p', async (version, range, expected) => {
+    const buildx = new Buildx();
+    expect(await buildx.versionSatisfies(range, version)).toBe(expected);
+  });
+});
+
+describe('resolveCertsDriverOpts', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv,
+      BUILDX_CONFIG: path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx')
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+    rimraf.sync(path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx'));
+  });
+  // prettier-ignore
+  test.each([
+    [
+      1,
+      'mycontext',
+      'docker-container',
+      {},
+      [],
+      []
+    ],
+    [
+      2,
+      'docker-container://mycontainer',
+      'docker-container',
+      {},
+      [],
+      []
+    ],
+    [
+      3,
+      'tcp://graviton2:1234',
+      'remote',
+      {},
+      [],
+      []
+    ],
+    [
+      4,
+      'tcp://graviton2:1234',
+      'remote',
+      {
+        cacert: 'foo',
+        cert: 'foo',
+        key: 'foo',
+      } as Cert,
+      [
+        path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'cacert_graviton2-1234.pem'),
+        path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'cert_graviton2-1234.pem'),
+        path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'key_graviton2-1234.pem')
+      ],
+      [
+        `cacert=${path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'cacert_graviton2-1234.pem')}`,
+        `cert=${path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'cert_graviton2-1234.pem')}`,
+        `key=${path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'key_graviton2-1234.pem')}`
+      ]
+    ],
+    [
+      5,
+      'tcp://mybuilder:1234',
+      'docker-container',
+      {
+        cacert: 'foo',
+        cert: 'foo',
+        key: 'foo',
+      } as Cert,
+      [
+        path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'cacert_mybuilder-1234.pem'),
+        path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'cert_mybuilder-1234.pem'),
+        path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'key_mybuilder-1234.pem')
+      ],
+      []
+    ],
+  ])('%p. given %p endpoint, %p driver', async (id: number, endpoint: string, driver: string, cert: Cert, expectedFiles: Array<string>, expectedOpts: Array<string>) => {
+    fs.mkdirSync(Buildx.certsDir, {recursive: true});
+    expect(Buildx.resolveCertsDriverOpts(driver, endpoint, cert)).toEqual(expectedOpts);
+    for (const k in expectedFiles) {
+      const file = expectedFiles[k];
+      expect(fs.existsSync(file)).toBe(true);
+    }
+  });
+});
--- a/tests/buildx/inputs.test.ts
+++ b/tests/buildx/inputs.test.ts
@@ -14,30 +14,31 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest, test, beforeEach, afterEach} from '@jest/globals';
+import {afterEach, beforeEach, describe, expect, it, jest, test} from '@jest/globals';
 import * as fs from 'fs';
 import * as path from 'path';
-import rimraf from 'rimraf';
-import * as semver from 'semver';
-import * as exec from '@actions/exec';
+import * as rimraf from 'rimraf';

-import {Buildx} from '../src/buildx';
-import {Context} from '../src/context';
+import {Context} from '../../src/context';
+import {Inputs} from '../../src/buildx/inputs';

-const tmpDir = path.join('/tmp/.docker-actions-toolkit-jest').split(path.sep).join(path.posix.sep);
-const tmpName = path.join(tmpDir, '.tmpname-jest').split(path.sep).join(path.posix.sep);
+const fixturesDir = path.join(__dirname, '..', 'fixtures');
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-inputs-jest');
+const tmpName = path.join(tmpDir, '.tmpname-jest');
 const metadata = `{
  "containerimage.config.digest": "sha256:059b68a595b22564a1cbc167af369349fdc2ecc1f7bc092c2235cbf601a795fd",
  "containerimage.digest": "sha256:b09b9482c72371486bb2c1d2c2a2633ed1d0b8389e12c8d52b9e052725c0c83c"
 }`;

-jest.spyOn(Context.prototype as any, 'tmpDir').mockImplementation((): string => {
+jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
  if (!fs.existsSync(tmpDir)) {
    fs.mkdirSync(tmpDir, {recursive: true});
  }
  return tmpDir;
 });
-jest.spyOn(Context.prototype as any, 'tmpName').mockImplementation((): string => {
+
+jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
  return tmpName;
 });

@@ -49,146 +50,30 @@ afterEach(() => {
  rimraf.sync(tmpDir);
 });

-describe('isAvailable', () => {
-  it('docker cli', async () => {
-    const execSpy = jest.spyOn(exec, 'getExecOutput');
-    const buildx = new Buildx({
-      context: new Context(),
-      standalone: false
-    });
-    buildx.isAvailable().catch(() => {
-      // noop
-    });
-    // eslint-disable-next-line jest/no-standalone-expect
-    expect(execSpy).toHaveBeenCalledWith(`docker`, ['buildx'], {
-      silent: true,
-      ignoreReturnCode: true
-    });
-  });
-  it('standalone', async () => {
-    const execSpy = jest.spyOn(exec, 'getExecOutput');
-    const buildx = new Buildx({
-      context: new Context(),
-      standalone: true
-    });
-    buildx.isAvailable().catch(() => {
-      // noop
-    });
-    // eslint-disable-next-line jest/no-standalone-expect
-    expect(execSpy).toHaveBeenCalledWith(`buildx`, [], {
-      silent: true,
-      ignoreReturnCode: true
-    });
-  });
-});
-
-describe('printInspect', () => {
-  it('prints builder2 instance', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
-    const buildx = new Buildx({
-      context: new Context(),
-      standalone: true
-    });
-    buildx.printInspect('builder2').catch(() => {
-      // noop
-    });
-    expect(execSpy).toHaveBeenCalledWith(`buildx`, ['inspect', 'builder2'], {
-      failOnStdErr: false
-    });
-  });
-});
-
-describe('printVersion', () => {
-  it('docker cli', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
-    const buildx = new Buildx({
-      context: new Context(),
-      standalone: false
-    });
-    buildx.printVersion();
-    expect(execSpy).toHaveBeenCalledWith(`docker`, ['buildx', 'version'], {
-      failOnStdErr: false
-    });
-  });
-  it('standalone', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
-    const buildx = new Buildx({
-      context: new Context(),
-      standalone: true
-    });
-    buildx.printVersion();
-    expect(execSpy).toHaveBeenCalledWith(`buildx`, ['version'], {
-      failOnStdErr: false
-    });
-  });
-});
-
-describe('version', () => {
-  it('valid', async () => {
-    const buildx = new Buildx({
-      context: new Context()
-    });
-    expect(semver.valid(await buildx.version)).not.toBeUndefined();
-  });
-});
-
-describe('parseVersion', () => {
-  test.each([
-    ['github.com/docker/buildx 0.4.1+azure bda4882a65349ca359216b135896bddc1d92461c', '0.4.1'],
-    ['github.com/docker/buildx v0.4.1 bda4882a65349ca359216b135896bddc1d92461c', '0.4.1'],
-    ['github.com/docker/buildx v0.4.2 fb7b670b764764dc4716df3eba07ffdae4cc47b2', '0.4.2'],
-    ['github.com/docker/buildx f117971 f11797113e5a9b86bd976329c5dbb8a8bfdfadfa', 'f117971']
-  ])('given %p', async (stdout, expected) => {
-    expect(Buildx.parseVersion(stdout)).toEqual(expected);
-  });
-});
-
-describe('versionSatisfies', () => {
-  test.each([
-    ['0.4.1', '>=0.3.2', true],
-    ['bda4882a65349ca359216b135896bddc1d92461c', '>0.1.0', false],
-    ['f117971', '>0.6.0', true]
-  ])('given %p', async (version, range, expected) => {
-    const buildx = new Buildx({
-      context: new Context()
-    });
-    expect(await buildx.versionSatisfies(range, version)).toBe(expected);
-  });
-});
-
-describe('getBuildImageID', () => {
+describe('resolveBuildImageID', () => {
  it('matches', async () => {
-    const buildx = new Buildx({
-      context: new Context()
-    });
    const imageID = 'sha256:bfb45ab72e46908183546477a08f8867fc40cebadd00af54b071b097aed127a9';
-    const imageIDFile = buildx.getBuildImageIDFilePath();
+    const imageIDFile = Inputs.getBuildImageIDFilePath();
    await fs.writeFileSync(imageIDFile, imageID);
-    const expected = buildx.getBuildImageID();
+    const expected = Inputs.resolveBuildImageID();
    expect(expected).toEqual(imageID);
  });
 });

-describe('getBuildMetadata', () => {
+describe('resolveBuildMetadata', () => {
  it('matches', async () => {
-    const buildx = new Buildx({
-      context: new Context()
-    });
-    const metadataFile = buildx.getBuildMetadataFilePath();
+    const metadataFile = Inputs.getBuildMetadataFilePath();
    await fs.writeFileSync(metadataFile, metadata);
-    const expected = buildx.getBuildMetadata();
+    const expected = Inputs.resolveBuildMetadata();
    expect(expected).toEqual(metadata);
  });
 });

-describe('getDigest', () => {
+describe('resolveDigest', () => {
  it('matches', async () => {
-    const buildx = new Buildx({
-      context: new Context()
-    });
-    const metadataFile = buildx.getBuildMetadataFilePath();
+    const metadataFile = Inputs.getBuildMetadataFilePath();
    await fs.writeFileSync(metadataFile, metadata);
-    const expected = buildx.getDigest();
+    const expected = Inputs.resolveDigest();
    expect(expected).toEqual('sha256:b09b9482c72371486bb2c1d2c2a2633ed1d0b8389e12c8d52b9e052725c0c83c');
  });
 });
@@ -235,14 +120,11 @@ describe('getProvenanceInput', () => {
    ],
  ])('given input %p', async (input: string, expected: string) => {
    await setInput('provenance', input);
-    const buildx = new Buildx({
-      context: new Context()
-    });
-    expect(buildx.getProvenanceInput('provenance')).toEqual(expected);
+    expect(Inputs.getProvenanceInput('provenance')).toEqual(expected);
  });
 });

-describe('getProvenanceAttrs', () => {
+describe('resolveProvenanceAttrs', () => {
  // prettier-ignore
  test.each([
    [
@@ -266,42 +148,11 @@ describe('getProvenanceAttrs', () => {
      'builder-id=https://github.com/docker/actions-toolkit/actions/runs/123'
    ],
  ])('given %p', async (input: string, expected: string) => {
-    const buildx = new Buildx({
-      context: new Context()
-    });
-    expect(buildx.getProvenanceAttrs(input)).toEqual(expected);
+    expect(Inputs.resolveProvenanceAttrs(input)).toEqual(expected);
  });
 });

-describe('getRelease', () => {
-  it('returns latest buildx GitHub release', async () => {
-    const release = await Buildx.getRelease('latest');
-    expect(release).not.toBeNull();
-    expect(release?.tag_name).not.toEqual('');
-  });
-
-  it('returns v0.10.1 buildx GitHub release', async () => {
-    const release = await Buildx.getRelease('v0.10.1');
-    expect(release).not.toBeNull();
-    expect(release?.id).toEqual(90346950);
-    expect(release?.tag_name).toEqual('v0.10.1');
-    expect(release?.html_url).toEqual('https://github.com/docker/buildx/releases/tag/v0.10.1');
-  });
-
-  it('returns v0.2.2 buildx GitHub release', async () => {
-    const release = await Buildx.getRelease('v0.2.2');
-    expect(release).not.toBeNull();
-    expect(release?.id).toEqual(17671545);
-    expect(release?.tag_name).toEqual('v0.2.2');
-    expect(release?.html_url).toEqual('https://github.com/docker/buildx/releases/tag/v0.2.2');
-  });
-
-  it('unknown release', async () => {
-    await expect(Buildx.getRelease('foo')).rejects.toThrowError(new Error('Cannot find Buildx release foo in https://raw.githubusercontent.com/docker/buildx/master/.github/releases.json'));
-  });
-});
-
-describe('generateBuildSecret', () => {
+describe('resolveBuildSecret', () => {
  test.each([
    ['A_SECRET=abcdef0123456789', false, 'A_SECRET', 'abcdef0123456789', null],
    ['GIT_AUTH_TOKEN=abcdefghijklmno=0123456789', false, 'GIT_AUTH_TOKEN', 'abcdefghijklmno=0123456789', null],
@@ -309,18 +160,15 @@ describe('generateBuildSecret', () => {
    ['aaaaaaaa', false, '', '', new Error('aaaaaaaa is not a valid secret')],
    ['aaaaaaaa=', false, '', '', new Error('aaaaaaaa= is not a valid secret')],
    ['=bbbbbbb', false, '', '', new Error('=bbbbbbb is not a valid secret')],
-    [`foo=${path.join(__dirname, 'fixtures', 'secret.txt').split(path.sep).join(path.posix.sep)}`, true, 'foo', 'bar', null],
+    [`foo=${path.join(fixturesDir, 'secret.txt')}`, true, 'foo', 'bar', null],
    [`notfound=secret`, true, '', '', new Error('secret file secret not found')]
-  ])('given %p key and %p secret', async (kvp: string, file: boolean, exKey: string, exValue: string, error: Error) => {
+  ])('given %p key and %p secret', async (kvp: string, file: boolean, exKey: string, exValue: string, error: Error | null) => {
    try {
-      const buildx = new Buildx({
-        context: new Context()
-      });
      let secret: string;
      if (file) {
-        secret = buildx.generateBuildSecretFile(kvp);
+        secret = Inputs.resolveBuildSecretFile(kvp);
      } else {
-        secret = buildx.generateBuildSecretString(kvp);
+        secret = Inputs.resolveBuildSecretString(kvp);
      }
      expect(secret).toEqual(`id=${exKey},src=${tmpName}`);
      expect(fs.readFileSync(tmpName, 'utf-8')).toEqual(exValue);
@@ -329,6 +177,21 @@ describe('generateBuildSecret', () => {
      expect(e.message).toEqual(error?.message);
    }
  });
+
+  test.each([
+    ['FOO=bar', 'FOO', 'bar', null],
+    ['FOO=', 'FOO', '', new Error('FOO= is not a valid secret')],
+    ['=bar', '', '', new Error('=bar is not a valid secret')],
+    ['FOO=bar=baz', 'FOO', 'bar=baz', null]
+  ])('given %p key and %p env', async (kvp: string, exKey: string, exValue: string, error: Error | null) => {
+    try {
+      const secret = Inputs.resolveBuildSecretEnv(kvp);
+      expect(secret).toEqual(`id=${exKey},env=${exValue}`);
+    } catch (e) {
+      // eslint-disable-next-line jest/no-conditional-expect
+      expect(e.message).toEqual(error?.message);
+    }
+  });
 });

 describe('hasLocalExporter', () => {
@@ -343,7 +206,7 @@ describe('hasLocalExporter', () => {
    [['" type= local" , dest=./release-out'], true],
    [['.'], true]
  ])('given %p returns %p', async (exporters: Array<string>, expected: boolean) => {
-    expect(Buildx.hasLocalExporter(exporters)).toEqual(expected);
+    expect(Inputs.hasLocalExporter(exporters)).toEqual(expected);
  });
 });

@@ -359,7 +222,7 @@ describe('hasTarExporter', () => {
    [['" type= local" , dest=./release-out'], false],
    [['.'], false]
  ])('given %p returns %p', async (exporters: Array<string>, expected: boolean) => {
-    expect(Buildx.hasTarExporter(exporters)).toEqual(expected);
+    expect(Inputs.hasTarExporter(exporters)).toEqual(expected);
  });
 });

@@ -373,9 +236,11 @@ describe('hasDockerExporter', () => {
    [['type=docker', 'type=tar,dest=/tmp/image.tar'], true, undefined],
    [['"type=tar","dest=/tmp/image.tar"'], false, undefined],
    [['" type= local" , dest=./release-out'], false, undefined],
+    [['type=docker'], true, false],
+    [['type=docker'], true, true],
    [['.'], true, true],
  ])('given %p returns %p', async (exporters: Array<string>, expected: boolean, load: boolean | undefined) => {
-    expect(Buildx.hasDockerExporter(exporters, load)).toEqual(expected);
+    expect(Inputs.hasDockerExporter(exporters, load)).toEqual(expected);
  });
 });

@@ -385,7 +250,7 @@ describe('hasGitAuthTokenSecret', () => {
    [['A_SECRET=abcdef0123456789'], false],
    [['GIT_AUTH_TOKEN=abcdefghijklmno=0123456789'], true],
  ])('given %p secret', async (kvp: Array<string>, expected: boolean) => {
-    expect(Buildx.hasGitAuthTokenSecret(kvp)).toBe(expected);
+    expect(Inputs.hasGitAuthTokenSecret(kvp)).toBe(expected);
  });
 });

--- a/tests/buildx/install.test.ts
+++ b/tests/buildx/install.test.ts
@@ -0,0 +1,181 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, it, jest, test, beforeEach, afterEach} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as rimraf from 'rimraf';
+import osm = require('os');
+
+import {Install} from '../../src/buildx/install';
+
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-jest');
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+afterEach(function () {
+  rimraf.sync(tmpDir);
+});
+
+describe('download', () => {
+  // prettier-ignore
+  test.each([
+    ['v0.9.0', false],
+    ['v0.10.5', true],
+    ['latest', true]
+  ])(
+  'acquires %p of buildx (standalone: %p)', async (version, standalone) => {
+      const install = new Install({standalone: standalone});
+      const toolPath = await install.download(version);
+      expect(fs.existsSync(toolPath)).toBe(true);
+      let buildxBin: string;
+      if (standalone) {
+        buildxBin = await install.installStandalone(toolPath, tmpDir);
+      } else {
+        buildxBin = await install.installPlugin(toolPath, tmpDir);
+      }
+      expect(fs.existsSync(buildxBin)).toBe(true);
+    },
+    100000
+  );
+
+  // prettier-ignore
+  test.each([
+    // following versions are already cached to htc from previous test cases
+    ['v0.9.0'],
+    ['v0.10.5'],
+  ])(
+  'acquires %p of buildx with cache', async (version) => {
+    const install = new Install({standalone: false});
+    const toolPath = await install.download(version);
+    expect(fs.existsSync(toolPath)).toBe(true);
+  });
+
+  // TODO: add tests for arm
+  // prettier-ignore
+  test.each([
+    ['win32', 'x64'],
+    ['win32', 'arm64'],
+    ['darwin', 'x64'],
+    ['darwin', 'arm64'],
+    ['linux', 'x64'],
+    ['linux', 'arm64'],
+    ['linux', 'ppc64'],
+    ['linux', 's390x'],
+  ])(
+  'acquires buildx for %s/%s', async (os, arch) => {
+      jest.spyOn(osm, 'platform').mockImplementation(() => os as NodeJS.Platform);
+      jest.spyOn(osm, 'arch').mockImplementation(() => arch);
+      const install = new Install();
+      const buildxBin = await install.download('latest');
+      expect(fs.existsSync(buildxBin)).toBe(true);
+    },
+    100000
+  );
+});
+
+describe('build', () => {
+  // eslint-disable-next-line jest/no-disabled-tests
+  it.skip('builds refs/pull/648/head', async () => {
+    const install = new Install();
+    const toolPath = await install.build('https://github.com/docker/buildx.git#refs/pull/648/head');
+    expect(fs.existsSync(toolPath)).toBe(true);
+    const buildxBin = await install.installStandalone(toolPath, tmpDir);
+    expect(fs.existsSync(buildxBin)).toBe(true);
+  }, 100000);
+
+  // eslint-disable-next-line jest/no-disabled-tests
+  it.skip('builds 67bd6f4dc82a9cd96f34133dab3f6f7af803bb14', async () => {
+    const install = new Install();
+    const toolPath = await install.build('https://github.com/docker/buildx.git#67bd6f4dc82a9cd96f34133dab3f6f7af803bb14');
+    expect(fs.existsSync(toolPath)).toBe(true);
+    const buildxBin = await install.installPlugin(toolPath, tmpDir);
+    expect(fs.existsSync(buildxBin)).toBe(true);
+  }, 100000);
+});
+
+describe('getDownloadVersion', () => {
+  it('returns official latest download version', async () => {
+    const version = await Install.getDownloadVersion('latest');
+    expect(version.key).toEqual('official');
+    expect(version.version).toEqual('latest');
+    expect(version.downloadURL).toEqual('https://github.com/docker/buildx/releases/download/v%s/%s');
+    expect(version.releasesURL).toEqual('https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-releases.json');
+  });
+
+  it('returns official v0.10.1 download version', async () => {
+    const version = await Install.getDownloadVersion('v0.10.1');
+    expect(version.key).toEqual('official');
+    expect(version.version).toEqual('v0.10.1');
+    expect(version.downloadURL).toEqual('https://github.com/docker/buildx/releases/download/v%s/%s');
+    expect(version.releasesURL).toEqual('https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-releases.json');
+  });
+
+  it('returns lab latest download version', async () => {
+    const version = await Install.getDownloadVersion('lab:latest');
+    expect(version.key).toEqual('lab');
+    expect(version.version).toEqual('latest');
+    expect(version.downloadURL).toEqual('https://github.com/docker/buildx-desktop/releases/download/v%s/%s');
+    expect(version.releasesURL).toEqual('https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-lab-releases.json');
+  });
+
+  it('returns lab v0.11.2-desktop.2 download version', async () => {
+    const version = await Install.getDownloadVersion('lab:v0.11.2-desktop.2');
+    expect(version.key).toEqual('lab');
+    expect(version.version).toEqual('v0.11.2-desktop.2');
+    expect(version.downloadURL).toEqual('https://github.com/docker/buildx-desktop/releases/download/v%s/%s');
+    expect(version.releasesURL).toEqual('https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-lab-releases.json');
+  });
+
+  it('unknown repo', async () => {
+    await expect(Install.getDownloadVersion('foo:bar')).rejects.toThrow(new Error('Cannot find buildx version for foo:bar'));
+  });
+});
+
+describe('getRelease', () => {
+  it('returns latest official GitHub release', async () => {
+    const version = await Install.getDownloadVersion('latest');
+    const release = await Install.getRelease(version);
+    expect(release).not.toBeNull();
+    expect(release?.tag_name).not.toEqual('');
+  });
+
+  it('returns v0.10.1 official GitHub release', async () => {
+    const version = await Install.getDownloadVersion('v0.10.1');
+    const release = await Install.getRelease(version);
+    expect(release).not.toBeNull();
+    expect(release?.id).toEqual(90346950);
+    expect(release?.tag_name).toEqual('v0.10.1');
+    expect(release?.html_url).toEqual('https://github.com/docker/buildx/releases/tag/v0.10.1');
+  });
+
+  it('returns v0.11.2-desktop.2 lab GitHub release', async () => {
+    const version = await Install.getDownloadVersion('lab:v0.11.2-desktop.2');
+    const release = await Install.getRelease(version);
+    expect(release).not.toBeNull();
+    expect(release?.id).toEqual(118213369);
+    expect(release?.tag_name).toEqual('v0.11.2-desktop.2');
+    expect(release?.html_url).toEqual('https://github.com/docker/buildx-desktop/releases/tag/v0.11.2-desktop.2');
+  });
+
+  it('unknown release', async () => {
+    const version = await Install.getDownloadVersion('foo');
+    await expect(Install.getRelease(version)).rejects.toThrow(new Error('Cannot find Buildx release foo in https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-releases.json'));
+  });
+});
--- a/tests/context.test.ts
+++ b/tests/context.test.ts
@@ -14,23 +14,25 @@
 * limitations under the License.
 */

-import fs from 'fs';
-import path from 'path';
-import rimraf from 'rimraf';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as rimraf from 'rimraf';
 import {describe, expect, jest, it, beforeEach, afterEach} from '@jest/globals';

 import {Context} from '../src/context';

-const tmpDir = path.join('/tmp/.docker-actions-toolkit-jest').split(path.sep).join(path.posix.sep);
-const tmpName = path.join(tmpDir, '.tmpname-jest').split(path.sep).join(path.posix.sep);
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'context-jest');
+const tmpName = path.join(tmpDir, '.tmpname-jest');

-jest.spyOn(Context.prototype, 'tmpDir').mockImplementation((): string => {
+jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
  if (!fs.existsSync(tmpDir)) {
    fs.mkdirSync(tmpDir, {recursive: true});
  }
  return tmpDir;
 });
-jest.spyOn(Context.prototype, 'tmpName').mockImplementation((): string => {
+
+jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
  return tmpName;
 });

@@ -42,16 +44,20 @@ afterEach(() => {
  rimraf.sync(tmpDir);
 });

+describe('gitRef', () => {
+  it('returns refs/heads/master', async () => {
+    expect(Context.gitRef()).toEqual('refs/heads/master');
+  });
+});
+
 describe('gitContext', () => {
  it('returns refs/heads/master', async () => {
-    const context = new Context();
-    expect(context.buildGitContext).toEqual('https://github.com/docker/actions-toolkit.git#refs/heads/master');
+    expect(Context.gitContext()).toEqual('https://github.com/docker/actions-toolkit.git#refs/heads/master');
  });
 });

 describe('provenanceBuilderID', () => {
  it('returns 123', async () => {
-    const context = new Context();
-    expect(context.provenanceBuilderID).toEqual('https://github.com/docker/actions-toolkit/actions/runs/123');
+    expect(Context.provenanceBuilderID()).toEqual('https://github.com/docker/actions-toolkit/actions/runs/123');
  });
 });
--- a/tests/docker.test.ts
+++ b/tests/docker.test.ts
@@ -1,78 +0,0 @@
-/**
- * Copyright 2023 actions-toolkit authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import {beforeEach, describe, expect, it, jest} from '@jest/globals';
-import * as exec from '@actions/exec';
-
-import {Docker} from '../src/docker';
-
-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
-describe('isAvailable', () => {
-  it('cli', () => {
-    const execSpy = jest.spyOn(exec, 'getExecOutput');
-    Docker.isAvailable();
-    // eslint-disable-next-line jest/no-standalone-expect
-    expect(execSpy).toHaveBeenCalledWith(`docker`, undefined, {
-      silent: true,
-      ignoreReturnCode: true
-    });
-  });
-});
-
-describe('printVersion', () => {
-  it('docker cli', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
-    Docker.printVersion(false).catch(() => {
-      // noop
-    });
-    expect(execSpy).toHaveBeenCalledWith(`docker`, ['version'], {
-      failOnStdErr: false
-    });
-  });
-  it('standalone', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
-    Docker.printVersion(true).catch(() => {
-      // noop
-    });
-    expect(execSpy).not.toHaveBeenCalledWith(`docker`, ['version'], {
-      failOnStdErr: false
-    });
-  });
-});
-
-describe('printInfo', () => {
-  it('docker cli', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
-    Docker.printInfo(false).catch(() => {
-      // noop
-    });
-    expect(execSpy).toHaveBeenCalledWith(`docker`, ['info'], {
-      failOnStdErr: false
-    });
-  });
-  it('standalone', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
-    Docker.printInfo(true).catch(() => {
-      // noop
-    });
-    expect(execSpy).not.toHaveBeenCalledWith(`docker`, ['info'], {
-      failOnStdErr: false
-    });
-  });
-});
--- a/tests/docker/docker.test.ts
+++ b/tests/docker/docker.test.ts
@@ -0,0 +1,143 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {afterEach, beforeEach, describe, expect, it, jest} from '@jest/globals';
+import * as fs from 'fs';
+import path from 'path';
+import * as io from '@actions/io';
+import osm = require('os');
+import * as rimraf from 'rimraf';
+
+import {Docker} from '../../src/docker/docker';
+import {Exec} from '../../src/exec';
+
+import {ConfigFile} from '../../src/types/docker';
+
+const fixturesDir = path.join(__dirname, '..', 'fixtures');
+
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'docker-jest');
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+afterEach(function () {
+  rimraf.sync(tmpDir);
+});
+
+describe('configDir', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv,
+      DOCKER_CONFIG: '/var/docker/config'
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+  it('returns default', async () => {
+    process.env.DOCKER_CONFIG = '';
+    jest.spyOn(osm, 'homedir').mockImplementation(() => path.join('/tmp', 'home'));
+    expect(Docker.configDir).toEqual(path.join('/tmp', 'home', '.docker'));
+  });
+  it('returns from env', async () => {
+    expect(Docker.configDir).toEqual('/var/docker/config');
+  });
+});
+
+describe('configFile', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    if (!fs.existsSync(tmpDir)) {
+      fs.mkdirSync(tmpDir, {recursive: true});
+    }
+    process.env = {
+      ...originalEnv,
+      DOCKER_CONFIG: tmpDir
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+  it('auths', async () => {
+    fs.copyFileSync(path.join(fixturesDir, 'docker-config-auths.json'), path.join(tmpDir, 'config.json'));
+    expect(Docker.configFile()).toEqual({
+      auths: {
+        'https://index.docker.io/v1/': {
+          auth: 'am9lam9lOmhlbGxv',
+          email: 'user@example.com'
+        }
+      }
+    } as unknown as ConfigFile);
+  });
+  it('proxies', async () => {
+    fs.copyFileSync(path.join(fixturesDir, 'docker-config-proxies.json'), path.join(tmpDir, 'config.json'));
+    expect(Docker.configFile()).toEqual({
+      proxies: {
+        default: {
+          httpProxy: 'http://127.0.0.1:3128',
+          httpsProxy: 'http://127.0.0.1:3128'
+        }
+      }
+    } as unknown as ConfigFile);
+  });
+});
+
+describe('isAvailable', () => {
+  it('cli', async () => {
+    const ioWhichSpy = jest.spyOn(io, 'which');
+    await Docker.isAvailable();
+    expect(ioWhichSpy).toHaveBeenCalledTimes(1);
+    expect(ioWhichSpy).toHaveBeenCalledWith('docker', true);
+  });
+});
+
+describe('context', () => {
+  it('call docker context show', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    await Docker.context().catch(() => {
+      // noop
+    });
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['context', 'inspect', '--format', '{{.Name}}'], {
+      ignoreReturnCode: true,
+      silent: true
+    });
+  });
+});
+
+describe('printVersion', () => {
+  it('call docker version', async () => {
+    const execSpy = jest.spyOn(Exec, 'exec');
+    await Docker.printVersion().catch(() => {
+      // noop
+    });
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['version']);
+  });
+});
+
+describe('printInfo', () => {
+  it('call docker info', async () => {
+    const execSpy = jest.spyOn(Exec, 'exec');
+    await Docker.printInfo().catch(() => {
+      // noop
+    });
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['info']);
+  });
+});
--- a/tests/docker/install.test.itg.ts
+++ b/tests/docker/install.test.itg.ts
@@ -0,0 +1,55 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import path from 'path';
+import {jest, describe, expect, test, beforeEach, afterEach} from '@jest/globals';
+
+import {Install} from '../../src/docker/install';
+import {Docker} from '../../src/docker/docker';
+
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'docker-install-jest');
+
+describe('install', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv,
+      LIMA_START_ARGS: '--cpus 4 --memory 8'
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+  // prettier-ignore
+  test.each(['v24.0.4'])(
+    'install docker %s', async (version) => {
+      await expect((async () => {
+        const install = new Install({
+          version: version,
+          runDir: tmpDir,
+          contextName: 'foo',
+          daemonConfig: `{"debug":true,"features":{"containerd-snapshotter":true}}`
+        });
+        await install.download();
+        await install.install();
+        await Docker.printVersion();
+        await Docker.printInfo();
+        await install.tearDown();
+      })()).resolves.not.toThrow();
+    }, 1200000);
+});
--- a/tests/docker/install.test.ts
+++ b/tests/docker/install.test.ts
@@ -0,0 +1,73 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, jest, test, beforeEach, afterEach, it} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as rimraf from 'rimraf';
+import osm = require('os');
+
+import {Install} from '../../src/docker/install';
+
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'docker-install-jest');
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+afterEach(function () {
+  rimraf.sync(tmpDir);
+});
+
+describe('download', () => {
+  // prettier-ignore
+  test.each([
+    ['v19.03.14', 'linux'],
+    ['v20.10.22', 'linux'],
+    ['v20.10.22', 'darwin'],
+    ['v20.10.22', 'win32'],
+  ])(
+  'acquires %p of docker (%s)', async (version, platformOS) => {
+    jest.spyOn(osm, 'platform').mockImplementation(() => platformOS as NodeJS.Platform);
+    const install = new Install({
+      version: version,
+      runDir: tmpDir,
+    });
+    const toolPath = await install.download();
+    expect(fs.existsSync(toolPath)).toBe(true);
+  }, 100000);
+});
+
+describe('getRelease', () => {
+  it('returns latest docker GitHub release', async () => {
+    const release = await Install.getRelease('latest');
+    expect(release).not.toBeNull();
+    expect(release?.tag_name).not.toEqual('');
+  });
+
+  it('returns v23.0.0 buildx GitHub release', async () => {
+    const release = await Install.getRelease('v23.0.0');
+    expect(release).not.toBeNull();
+    expect(release?.id).toEqual(91109643);
+    expect(release?.tag_name).toEqual('v23.0.0');
+    expect(release?.html_url).toEqual('https://github.com/moby/moby/releases/tag/v23.0.0');
+  });
+
+  it('unknown release', async () => {
+    await expect(Install.getRelease('foo')).rejects.toThrow(new Error('Cannot find Docker release foo in https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/docker-releases.json'));
+  });
+});
--- a/tests/dockerhub.test.ts
+++ b/tests/dockerhub.test.ts
@@ -0,0 +1,121 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, jest, it, beforeEach} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+
+import {DockerHub} from '../src/dockerhub';
+import {RepositoryResponse, RepositoryTagsResponse} from '../src/types/dockerhub';
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+import repoInfoFixture from './fixtures/dockerhub-repoinfo.json';
+import repoTagsFixture from './fixtures/dockerhub-repotags.json';
+import repoAllTagsFixture from './fixtures/dockerhub-repoalltags.json';
+
+describe('getRepository', () => {
+  it('returns repo info', async () => {
+    jest.spyOn(DockerHub.prototype, 'getRepository').mockImplementation((): Promise<RepositoryResponse> => {
+      return <Promise<RepositoryResponse>>(repoInfoFixture as unknown);
+    });
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    jest.spyOn(DockerHub as any, 'login').mockReturnValue('jwt_token');
+    const dockerhub = await DockerHub.build({
+      credentials: {
+        username: 'foo',
+        password: '0123456-7890-0000-1111-222222222'
+      }
+    });
+    const repoinfo = await dockerhub.getRepository({
+      namespace: 'foo',
+      name: 'bar'
+    });
+    expect(repoinfo.namespace).toEqual('foo');
+    expect(repoinfo.name).toEqual('bar');
+    expect(repoinfo.repository_type).toEqual('image');
+  });
+});
+
+describe('getRepositoryTags', () => {
+  it('return repo tags', async () => {
+    jest.spyOn(DockerHub.prototype, 'getRepositoryTags').mockImplementation((): Promise<RepositoryTagsResponse> => {
+      return <Promise<RepositoryTagsResponse>>(repoTagsFixture as unknown);
+    });
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    jest.spyOn(DockerHub as any, 'login').mockReturnValue('jwt_token');
+    const dockerhub = await DockerHub.build({
+      credentials: {
+        username: 'foo',
+        password: '0123456-7890-0000-1111-222222222'
+      }
+    });
+    const resp = await dockerhub.getRepositoryTags({
+      namespace: 'crazymax',
+      name: 'diun'
+    });
+    expect(resp.count).toBeGreaterThan(0);
+    expect(resp.next).not.toBeNull();
+    expect(resp.results.length).toBeGreaterThan(0);
+    expect(resp.results[0].last_updater_username).toEqual('crazymax');
+  });
+});
+
+describe('getRepositoryAllTags', () => {
+  it('return repo all tags', async () => {
+    jest.spyOn(DockerHub.prototype, 'getRepositoryAllTags').mockImplementation((): Promise<RepositoryTagsResponse> => {
+      return <Promise<RepositoryTagsResponse>>(repoAllTagsFixture as unknown);
+    });
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    jest.spyOn(DockerHub as any, 'login').mockReturnValue('jwt_token');
+    const dockerhub = await DockerHub.build({
+      credentials: {
+        username: 'foo',
+        password: '0123456-7890-0000-1111-222222222'
+      }
+    });
+    const resp = await dockerhub.getRepositoryAllTags({
+      namespace: 'crazymax',
+      name: 'diun'
+    });
+    expect(resp.count).toBeGreaterThan(0);
+    expect(resp.next).toBeNull();
+    expect(resp.results.length).toBeGreaterThan(0);
+    expect(resp.results[0].last_updater_username).toEqual('crazymax');
+  });
+});
+
+describe('updateRepoDescription', () => {
+  it.skip('set repo description', async () => {
+    const dockerhub = await DockerHub.build({
+      credentials: {
+        username: 'foo',
+        password: 'bar'
+      }
+    });
+    const resp = await dockerhub.updateRepoDescription({
+      namespace: 'crazymax',
+      name: 'test-toolkit',
+      description: 'Hello-World',
+      full_description: fs.readFileSync(path.join(__dirname, '..', 'README.md'), 'utf-8')
+    });
+    expect(resp.namespace).toEqual('foo');
+    expect(resp.name).toEqual('bar');
+    expect(resp.description).toEqual('Hello-World');
+  });
+});
--- a/tests/exec.test.ts
+++ b/tests/exec.test.ts
@@ -0,0 +1,51 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {beforeEach, describe, expect, it, jest} from '@jest/globals';
+
+import {Exec} from '../src/exec';
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+describe('exec', () => {
+  it('returns docker version', async () => {
+    const execSpy = jest.spyOn(Exec, 'exec');
+    await Exec.exec('docker', ['version'], {
+      ignoreReturnCode: true,
+      silent: true
+    });
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['version'], {
+      ignoreReturnCode: true,
+      silent: true
+    });
+  });
+});
+
+describe('getExecOutput', () => {
+  it('returns docker version', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    await Exec.getExecOutput('docker', ['version'], {
+      ignoreReturnCode: true,
+      silent: true
+    });
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['version'], {
+      ignoreReturnCode: true,
+      silent: true
+    });
+  });
+});
--- a/tests/fixtures/bake-01-overrides.json
+++ b/tests/fixtures/bake-01-overrides.json
@@ -0,0 +1,29 @@
+{
+  "group": {
+    "default": {
+      "targets": [
+        "image"
+      ]
+    }
+  },
+  "target": {
+    "image": {
+      "context": ".",
+      "dockerfile": "Dockerfile",
+      "args": {
+        "BUILDKIT_CONTEXT_KEEP_GIT_DIR": "1",
+        "GO_VERSION": "1.20"
+      },
+      "tags": [
+        "docker/buildx-bin:local"
+      ],
+      "target": "binaries",
+      "platforms": [
+        "linux/amd64"
+      ],
+      "output": [
+        "type=docker"
+      ]
+    }
+  }
+}
--- a/tests/fixtures/bake-01-validate.json
+++ b/tests/fixtures/bake-01-validate.json
@@ -0,0 +1,55 @@
+{
+  "group": {
+    "default": {
+      "targets": [
+        "validate"
+      ]
+    },
+    "validate": {
+      "targets": [
+        "lint",
+        "validate-vendor",
+        "validate-docs"
+      ]
+    }
+  },
+  "target": {
+    "lint": {
+      "context": ".",
+      "dockerfile": "./hack/dockerfiles/lint.Dockerfile",
+      "args": {
+        "BUILDKIT_CONTEXT_KEEP_GIT_DIR": "1",
+        "GO_VERSION": "1.20"
+      },
+      "output": [
+        "type=cacheonly"
+      ]
+    },
+    "validate-docs": {
+      "context": ".",
+      "dockerfile": "./hack/dockerfiles/docs.Dockerfile",
+      "args": {
+        "BUILDKIT_CONTEXT_KEEP_GIT_DIR": "1",
+        "BUILDX_EXPERIMENTAL": "1",
+        "FORMATS": "md",
+        "GO_VERSION": "1.20"
+      },
+      "target": "validate",
+      "output": [
+        "type=cacheonly"
+      ]
+    },
+    "validate-vendor": {
+      "context": ".",
+      "dockerfile": "./hack/dockerfiles/vendor.Dockerfile",
+      "args": {
+        "BUILDKIT_CONTEXT_KEEP_GIT_DIR": "1",
+        "GO_VERSION": "1.20"
+      },
+      "target": "validate",
+      "output": [
+        "type=cacheonly"
+      ]
+    }
+  }
+}
--- a/tests/fixtures/bake-01.hcl
+++ b/tests/fixtures/bake-01.hcl
@@ -0,0 +1,172 @@
+// Copyright 2023 actions-toolkit authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+variable "GO_VERSION" {
+  default = "1.20"
+}
+variable "DOCS_FORMATS" {
+  default = "md"
+}
+variable "DESTDIR" {
+  default = "./bin"
+}
+
+# Special target: https://github.com/docker/metadata-action#bake-definition
+target "meta-helper" {
+  tags = ["docker/buildx-bin:local"]
+}
+
+target "_common" {
+  args = {
+    GO_VERSION = GO_VERSION
+    BUILDKIT_CONTEXT_KEEP_GIT_DIR = 1
+  }
+}
+
+group "default" {
+  targets = ["binaries"]
+}
+
+group "validate" {
+  targets = ["lint", "validate-vendor", "validate-docs"]
+}
+
+target "lint" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/lint.Dockerfile"
+  output = ["type=cacheonly"]
+}
+
+target "validate-vendor" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/vendor.Dockerfile"
+  target = "validate"
+  output = ["type=cacheonly"]
+}
+
+target "validate-docs" {
+  inherits = ["_common"]
+  args = {
+    FORMATS = DOCS_FORMATS
+    BUILDX_EXPERIMENTAL = 1 // enables experimental cmds/flags for docs generation
+  }
+  dockerfile = "./hack/dockerfiles/docs.Dockerfile"
+  target = "validate"
+  output = ["type=cacheonly"]
+}
+
+target "validate-authors" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/authors.Dockerfile"
+  target = "validate"
+  output = ["type=cacheonly"]
+}
+
+target "validate-generated-files" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/generated-files.Dockerfile"
+  target = "validate"
+  output = ["type=cacheonly"]
+}
+
+target "update-vendor" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/vendor.Dockerfile"
+  target = "update"
+  output = ["."]
+}
+
+target "update-docs" {
+  inherits = ["_common"]
+  args = {
+    FORMATS = DOCS_FORMATS
+    BUILDX_EXPERIMENTAL = 1 // enables experimental cmds/flags for docs generation
+  }
+  dockerfile = "./hack/dockerfiles/docs.Dockerfile"
+  target = "update"
+  output = ["./docs/reference"]
+}
+
+target "update-authors" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/authors.Dockerfile"
+  target = "update"
+  output = ["."]
+}
+
+target "update-generated-files" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/generated-files.Dockerfile"
+  target = "update"
+  output = ["."]
+}
+
+target "mod-outdated" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/vendor.Dockerfile"
+  target = "outdated"
+  no-cache-filter = ["outdated"]
+  output = ["type=cacheonly"]
+}
+
+target "test" {
+  inherits = ["_common"]
+  target = "test-coverage"
+  output = ["${DESTDIR}/coverage"]
+}
+
+target "binaries" {
+  inherits = ["_common"]
+  target = "binaries"
+  output = ["${DESTDIR}/build"]
+  platforms = ["local"]
+}
+
+target "binaries-cross" {
+  inherits = ["binaries"]
+  platforms = [
+    "darwin/amd64",
+    "darwin/arm64",
+    "linux/amd64",
+    "linux/arm/v6",
+    "linux/arm/v7",
+    "linux/arm64",
+    "linux/ppc64le",
+    "linux/riscv64",
+    "linux/s390x",
+    "windows/amd64",
+    "windows/arm64"
+  ]
+}
+
+target "release" {
+  inherits = ["binaries-cross"]
+  target = "release"
+  output = ["${DESTDIR}/release"]
+}
+
+target "image" {
+  inherits = ["meta-helper", "binaries"]
+  output = ["type=image"]
+}
+
+target "image-cross" {
+  inherits = ["meta-helper", "binaries-cross"]
+  output = ["type=image"]
+}
+
+target "image-local" {
+  inherits = ["image"]
+  output = ["type=docker"]
+}
--- a/tests/fixtures/bake-02-build.json
+++ b/tests/fixtures/bake-02-build.json
@@ -0,0 +1,20 @@
+{
+  "group": {
+    "default": {
+      "targets": [
+        "build"
+      ]
+    }
+  },
+  "target": {
+    "build": {
+      "context": ".",
+      "dockerfile": "Dockerfile",
+      "args": {
+        "BUILDKIT_CONTEXT_KEEP_GIT_DIR": "1",
+        "GO_VERSION": "1.20"
+      },
+      "target": "build"
+    }
+  }
+}
--- a/tests/fixtures/bake-02.hcl
+++ b/tests/fixtures/bake-02.hcl
@@ -0,0 +1,33 @@
+// Copyright 2023 actions-toolkit authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+variable "GO_VERSION" {
+  default = "1.20"
+}
+
+target "_common" {
+  args = {
+    GO_VERSION = GO_VERSION
+    BUILDKIT_CONTEXT_KEEP_GIT_DIR = 1
+  }
+}
+
+group "default" {
+  targets = ["build"]
+}
+
+target "build" {
+  inherits = ["_common"]
+  target = "build"
+}
--- a/tests/fixtures/bake-buildx-0.10.4-binaries-cross.json
+++ b/tests/fixtures/bake-buildx-0.10.4-binaries-cross.json
@@ -0,0 +1,36 @@
+{
+  "group": {
+    "default": {
+      "targets": [
+        "binaries-cross"
+      ]
+    }
+  },
+  "target": {
+    "binaries-cross": {
+      "context": "https://github.com/docker/buildx.git#v0.10.4",
+      "dockerfile": "Dockerfile",
+      "args": {
+        "BUILDKIT_CONTEXT_KEEP_GIT_DIR": "1",
+        "GO_VERSION": "1.19"
+      },
+      "target": "binaries",
+      "platforms": [
+        "darwin/amd64",
+        "darwin/arm64",
+        "linux/amd64",
+        "linux/arm/v6",
+        "linux/arm/v7",
+        "linux/arm64",
+        "linux/ppc64le",
+        "linux/riscv64",
+        "linux/s390x",
+        "windows/amd64",
+        "windows/arm64"
+      ],
+      "output": [
+        "./bin/build"
+      ]
+    }
+  }
+}
--- a/tests/fixtures/docker-config-auths.json
+++ b/tests/fixtures/docker-config-auths.json
@@ -0,0 +1,8 @@
+{
+	"auths": {
+		"https://index.docker.io/v1/": {
+			"auth": "am9lam9lOmhlbGxv",
+			"email": "user@example.com"
+		}
+	}
+}
--- a/tests/fixtures/docker-config-proxies.json
+++ b/tests/fixtures/docker-config-proxies.json
@@ -0,0 +1,8 @@
+{
+  "proxies": {
+    "default": {
+      "httpProxy": "http://127.0.0.1:3128",
+      "httpsProxy": "http://127.0.0.1:3128"
+    }
+  }
+}
--- a/tests/fixtures/dockerhub-repoalltags.json
+++ b/tests/fixtures/dockerhub-repoalltags.json
--- a/tests/fixtures/dockerhub-repoinfo.json
+++ b/tests/fixtures/dockerhub-repoinfo.json
@@ -0,0 +1,34 @@
+{
+    "user": "foo",
+    "name": "bar",
+    "namespace": "foo",
+    "repository_type": "image",
+    "status": 1,
+    "status_description": "active",
+    "description": "Bar",
+    "is_private": false,
+    "is_automated": false,
+    "can_edit": true,
+    "star_count": 68,
+    "pull_count": 178255909,
+    "last_updated": "2023-02-02T14:22:31.184404Z",
+    "date_registered": "2019-06-04T20:08:57.306333Z",
+    "collaborator_count": 0,
+    "affiliation": "owner",
+    "hub_user": "foo",
+    "has_starred": false,
+    "full_description": "This is the full description of the repo.",
+    "permissions": {
+        "read": true,
+        "write": true,
+        "admin": true
+    },
+    "media_types": [
+        "application/vnd.docker.container.image.v1+json",
+        "application/vnd.docker.distribution.manifest.list.v2+json",
+        "application/vnd.oci.image.index.v1+json"
+    ],
+    "content_types": [
+        "image"
+    ]
+}
--- a/tests/fixtures/dockerhub-repotags.json
+++ b/tests/fixtures/dockerhub-repotags.json
--- a/tests/fixtures/github-repo.json
+++ b/tests/fixtures/github-repo.json
--- a/tests/fixtures/inspect10.txt
+++ b/tests/fixtures/inspect10.txt
@@ -0,0 +1,67 @@
+Name:          remote-builder
+Driver:        remote
+Last Activity: 2023-04-20 12:47:49 +0000 UTC
+
+Nodes:
+Name:      remote-builder0
+Endpoint:  docker-container://buildx_buildkit_dk-remote-builder0
+Status:    inactive
+Platforms:
+
+Name:           aws_graviton2
+Endpoint:       tcp://10.0.0.1:1234
+Driver Options: cacert="/home/user/.certs/aws_graviton2/ca.pem" cert="/home/user/.certs/aws_graviton2/cert.pem" key="/home/user/.certs/aws_graviton2/key.pem"
+Status:         running
+Buildkit:       v0.11.6
+Platforms:      darwin/arm64*, linux/arm64*, linux/arm/v5*, linux/arm/v6*, linux/arm/v7*, windows/arm64*
+Labels:
+ org.mobyproject.buildkit.worker.executor:         oci
+ org.mobyproject.buildkit.worker.hostname:         77ebc22e2d82
+ org.mobyproject.buildkit.worker.network:          host
+ org.mobyproject.buildkit.worker.oci.process-mode: sandbox
+ org.mobyproject.buildkit.worker.selinux.enabled:  false
+ org.mobyproject.buildkit.worker.snapshotter:      overlayfs
+GC Policy rule#0:
+ All:           false
+ Filters:       type==source.local,type==exec.cachemount,type==source.git.checkout
+ Keep Duration: 48h0m0s
+ Keep Bytes:    488.3MiB
+GC Policy rule#1:
+ All:           false
+ Keep Duration: 1440h0m0s
+ Keep Bytes:    23.28GiB
+GC Policy rule#2:
+ All:        false
+ Keep Bytes: 23.28GiB
+GC Policy rule#3:
+ All:        true
+ Keep Bytes: 23.28GiB
+
+Name:           linuxone_s390x
+Endpoint:       tcp://10.0.0.2:1234
+Driver Options: cacert="/home/user/.certs/linuxone_s390x/ca.pem" cert="/home/user/.certs/linuxone_s390x/cert.pem" key="/home/user/.certs/linuxone_s390x/key.pem"
+Status:         running
+Buildkit:       v0.11.6
+Platforms:      linux/s390x*
+Labels:
+ org.mobyproject.buildkit.worker.executor:         oci
+ org.mobyproject.buildkit.worker.hostname:         9d0d62a96818
+ org.mobyproject.buildkit.worker.network:          host
+ org.mobyproject.buildkit.worker.oci.process-mode: sandbox
+ org.mobyproject.buildkit.worker.selinux.enabled:  false
+ org.mobyproject.buildkit.worker.snapshotter:      overlayfs
+GC Policy rule#0:
+ All:           false
+ Filters:       type==source.local,type==exec.cachemount,type==source.git.checkout
+ Keep Duration: 48h0m0s
+ Keep Bytes:    488.3MiB
+GC Policy rule#1:
+ All:           false
+ Keep Duration: 1440h0m0s
+ Keep Bytes:    9.313GiB
+GC Policy rule#2:
+ All:        false
+ Keep Bytes: 9.313GiB
+GC Policy rule#3:
+ All:        true
+ Keep Bytes: 9.313GiB
--- a/tests/fixtures/inspect7.txt
+++ b/tests/fixtures/inspect7.txt
@@ -5,7 +5,7 @@ Last Activity: 2023-01-16 09:45:23 +0000 UTC
 Nodes:
 Name:           builder20
 Endpoint:       unix:///var/run/docker.sock
-Driver Options: env.BUILDKIT_STEP_LOG_MAX_SIZE="10485760" env.BUILDKIT_STEP_LOG_MAX_SPEED="10485760" env.JAEGER_TRACE="localhost:6831" image="moby/buildkit:latest" network="host"
+Driver Options: env.BUILDKIT_STEP_LOG_MAX_SIZE="10485760" env.BUILDKIT_STEP_LOG_MAX_SPEED="10485760" env.JAEGER_TRACE="localhost:6831" image="moby/buildkit:latest" network="host" qemu.install="true"
 Status:         running
 Flags:          --debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host
 Buildkit:       v0.11.0
--- a/tests/fixtures/inspect8.txt
+++ b/tests/fixtures/inspect8.txt
@@ -0,0 +1,34 @@
+Name:          builder-52aa0611-faf0-42ac-a940-461e4e287d68
+Driver:        docker-container
+Last Activity: 2023-06-13 13:52:31 +0000 UTC
+
+Nodes:
+Name:           builder-52aa0611-faf0-42ac-a940-461e4e287d680
+Endpoint:       unix:///var/run/docker.sock
+Driver Options: image="moby/buildkit:buildx-stable-1" network="host"
+Status:         running
+Flags:          --debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host
+Buildkit:       v0.11.6
+Platforms:      linux/amd64, linux/amd64/v2, linux/amd64/v3, linux/amd64/v4, linux/arm64, linux/riscv64, linux/ppc64le, linux/s390x, linux/386, linux/mips64le, linux/mips64, linux/arm/v7, linux/arm/v6
+Labels:
+ org.mobyproject.buildkit.worker.executor:         oci
+ org.mobyproject.buildkit.worker.hostname:         fv-az572-38
+ org.mobyproject.buildkit.worker.network:          host
+ org.mobyproject.buildkit.worker.oci.process-mode: sandbox
+ org.mobyproject.buildkit.worker.selinux.enabled:  false
+ org.mobyproject.buildkit.worker.snapshotter:      overlayfs
+GC Policy rule#0:
+ All:           false
+ Filters:       type==source.local,type==exec.cachemount,type==source.git.checkout
+ Keep Duration: 48h0m0s
+ Keep Bytes:    488.3MiB
+GC Policy rule#1:
+ All:           false
+ Keep Duration: 1440h0m0s
+ Keep Bytes:    8.382GiB
+GC Policy rule#2:
+ All:        false
+ Keep Bytes: 8.382GiB
+GC Policy rule#3:
+ All:        true
+ Keep Bytes: 8.382GiB
--- a/tests/fixtures/inspect9.txt
+++ b/tests/fixtures/inspect9.txt
@@ -0,0 +1,14 @@
+Name:          default
+Driver:        docker
+Last Activity: 2023-06-13 18:13:43 +0000 UTC
+
+Nodes:
+Name:      default
+Endpoint:  default
+Status:    running
+Buildkit:  v0.11.7-0.20230525183624-798ad6b0ce9f
+Platforms: linux/amd64, linux/amd64/v2, linux/amd64/v3, linux/arm64, linux/riscv64, linux/ppc64le, linux/s390x, linux/386, linux/mips64le, linux/mips64, linux/arm/v7, linux/arm/v6
+GC Policy rule#0:
+ All:        true
+ Filters:
+ Keep Bytes: 100GiB
--- a/tests/git.test.ts
+++ b/tests/git.test.ts
@@ -17,18 +17,196 @@
 import {beforeEach, describe, expect, it, jest} from '@jest/globals';

 import {Git} from '../src/git';
+import {Exec} from '../src/exec';
+import {ExecOutput} from '@actions/exec';

 beforeEach(() => {
  jest.clearAllMocks();
+  jest.restoreAllMocks();
 });

-describe('git', () => {
-  it('returns git remote ref', async () => {
-    try {
-      expect(await Git.getRemoteSha('https://github.com/docker/buildx.git', 'refs/pull/648/head')).toEqual('f11797113e5a9b86bd976329c5dbb8a8bfdfadfa');
-    } catch (e) {
-      // eslint-disable-next-line jest/no-conditional-expect
-      expect(e).toEqual(null);
-    }
+describe('context', () => {
+  it('returns mocked ref and sha', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git show --format=%H HEAD --quiet --':
+          result = 'test-sha';
+          break;
+        case 'git branch --show-current':
+          result = 'test';
+          break;
+        case 'git symbolic-ref HEAD':
+          result = 'refs/heads/test';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+    const ctx = await Git.context();
+    expect(ctx.ref).toEqual('refs/heads/test');
+    expect(ctx.sha).toEqual('test-sha');
+  });
+});
+
+describe('isInsideWorkTree', () => {
+  it('have been called', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    try {
+      await Git.isInsideWorkTree();
+    } catch (err) {
+      // noop
+    }
+    expect(execSpy).toHaveBeenCalledWith(`git`, ['rev-parse', '--is-inside-work-tree'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+});
+
+describe('remoteSha', () => {
+  it('returns sha using git ls-remote', async () => {
+    expect(await Git.remoteSha('https://github.com/docker/buildx.git', 'refs/pull/648/head')).toEqual('f11797113e5a9b86bd976329c5dbb8a8bfdfadfa');
+  });
+  it('returns sha using github api', async () => {
+    expect(await Git.remoteSha('https://github.com/docker/buildx.git', 'refs/pull/648/head', process.env.GITHUB_TOKEN)).toEqual('f11797113e5a9b86bd976329c5dbb8a8bfdfadfa');
+  });
+});
+
+describe('remoteURL', () => {
+  it('have been called', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    try {
+      await Git.remoteURL();
+    } catch (err) {
+      // noop
+    }
+    expect(execSpy).toHaveBeenCalledWith(`git`, ['remote', 'get-url', 'origin'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+});
+
+describe('ref', () => {
+  it('returns mocked ref', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = 'test';
+          break;
+        case 'git symbolic-ref HEAD':
+          result = 'refs/heads/test';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/heads/test');
+  });
+
+  it('returns mocked detached tag ref', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD, tag: 8.0.0';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/tags/8.0.0');
+  });
+
+  it('returns mocked detached branch ref', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'HEAD, origin/test, test';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/heads/test');
+  });
+});
+
+describe('fullCommit', () => {
+  it('have been called', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    try {
+      await Git.fullCommit();
+    } catch (err) {
+      // noop
+    }
+    expect(execSpy).toHaveBeenCalledWith(`git`, ['show', '--format=%H', 'HEAD', '--quiet', '--'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+});
+
+describe('shortCommit', () => {
+  it('have been called', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    try {
+      await Git.shortCommit();
+    } catch (err) {
+      // noop
+    }
+    expect(execSpy).toHaveBeenCalledWith(`git`, ['show', '--format=%h', 'HEAD', '--quiet', '--'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+});
+
+describe('tag', () => {
+  it('have been called', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    try {
+      await Git.tag();
+    } catch (err) {
+      // noop
+    }
+    expect(execSpy).toHaveBeenCalledWith(`git`, ['tag', '--points-at', 'HEAD', '--sort', '-version:creatordate'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
  });
 });
--- a/tests/github.test.ts
+++ b/tests/github.test.ts
@@ -17,26 +17,33 @@
 import {describe, expect, jest, it, beforeEach, afterEach} from '@jest/globals';
 import * as fs from 'fs';
 import * as path from 'path';
+import * as core from '@actions/core';

-import {GitHub, GitHubRepo} from '../src/github';
+import {GitHub} from '../src/github';
+import {GitHubRepo} from '../src/types/github';

 beforeEach(() => {
  jest.clearAllMocks();
 });

-import * as repoFixture from './fixtures/repo.json';
+import repoFixture from './fixtures/github-repo.json';
 jest.spyOn(GitHub.prototype, 'repoData').mockImplementation((): Promise<GitHubRepo> => {
  return <Promise<GitHubRepo>>(repoFixture as unknown);
 });

+describe('repoData', () => {
+  it('returns GitHub repository', async () => {
+    const github = new GitHub();
+    expect((await github.repoData()).name).toEqual('Hello-World');
+  });
+});
+
 describe('context', () => {
  it('returns repository name from payload', async () => {
-    const github = new GitHub();
-    expect(github.context.payload.repository?.name).toEqual('test-docker-action');
+    expect(GitHub.context.payload.repository?.name).toEqual('test-docker-action');
  });
  it('is repository private', async () => {
-    const github = new GitHub();
-    expect(github.context.payload.repository?.private).toEqual(true);
+    expect(GitHub.context.payload.repository?.private).toEqual(true);
  });
 });

@@ -54,12 +61,31 @@ describe('serverURL', () => {
  });
  it('returns default', async () => {
    process.env.GITHUB_SERVER_URL = '';
-    const github = new GitHub();
-    expect(github.serverURL).toEqual('https://github.com');
+    expect(GitHub.serverURL).toEqual('https://github.com');
  });
  it('returns from env', async () => {
-    const github = new GitHub();
-    expect(github.serverURL).toEqual('https://foo.github.com');
+    expect(GitHub.serverURL).toEqual('https://foo.github.com');
+  });
+});
+
+describe('apiURL', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv,
+      GITHUB_API_URL: 'https://bar.github.com'
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+  it('returns default', async () => {
+    process.env.GITHUB_API_URL = '';
+    expect(GitHub.apiURL).toEqual('https://api.github.com');
+  });
+  it('returns from env', async () => {
+    expect(GitHub.apiURL).toEqual('https://bar.github.com');
  });
 });

@@ -76,21 +102,52 @@ describe('actionsRuntimeToken', () => {
  });
  it('empty', async () => {
    process.env.ACTIONS_RUNTIME_TOKEN = '';
-    const github = new GitHub();
-    expect(github.actionsRuntimeToken).toEqual({});
+    expect(GitHub.actionsRuntimeToken).toBeUndefined();
+  });
+  it('malformed', async () => {
+    process.env.ACTIONS_RUNTIME_TOKEN = 'foo';
+    expect(() => {
+      GitHub.actionsRuntimeToken;
+    }).toThrow();
  });
  it('fixture', async () => {
-    process.env.ACTIONS_RUNTIME_TOKEN = fs.readFileSync(path.join(__dirname, 'fixtures', 'runtimeToken.txt')).toString().trim();
-    const github = new GitHub();
-    const runtimeToken = github.actionsRuntimeToken;
-    expect(runtimeToken.ac).toEqual('[{"Scope":"refs/heads/master","Permission":3}]');
-    expect(runtimeToken.iss).toEqual('vstoken.actions.githubusercontent.com');
+    process.env.ACTIONS_RUNTIME_TOKEN = fs
+      .readFileSync(path.join(__dirname, 'fixtures', 'runtimeToken.txt'))
+      .toString()
+      .trim();
+    const runtimeToken = GitHub.actionsRuntimeToken;
+    expect(runtimeToken?.ac).toEqual('[{"Scope":"refs/heads/master","Permission":3}]');
+    expect(runtimeToken?.iss).toEqual('vstoken.actions.githubusercontent.com');
  });
 });

-describe('repoData', () => {
-  it('returns GitHub repository', async () => {
-    const github = new GitHub();
-    expect((await github.repoData()).name).toEqual('Hello-World');
+describe('printActionsRuntimeTokenACs', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+  it('empty', async () => {
+    process.env.ACTIONS_RUNTIME_TOKEN = '';
+    await expect(GitHub.printActionsRuntimeTokenACs()).rejects.toThrow(new Error('ACTIONS_RUNTIME_TOKEN not set'));
+  });
+  it('malformed', async () => {
+    process.env.ACTIONS_RUNTIME_TOKEN = 'foo';
+    await expect(GitHub.printActionsRuntimeTokenACs()).rejects.toThrow(new Error('Cannot parse GitHub Actions Runtime Token: Invalid token specified: missing part #2'));
+  });
+  it('refs/heads/master', async () => {
+    const infoSpy = jest.spyOn(core, 'info');
+    process.env.ACTIONS_RUNTIME_TOKEN = fs
+      .readFileSync(path.join(__dirname, 'fixtures', 'runtimeToken.txt'))
+      .toString()
+      .trim();
+    await GitHub.printActionsRuntimeTokenACs();
+    expect(infoSpy).toHaveBeenCalledTimes(1);
+    expect(infoSpy).toHaveBeenCalledWith(`refs/heads/master: read/write`);
  });
 });
--- a/tests/util.test.ts
+++ b/tests/util.test.ts
@@ -69,16 +69,40 @@ describe('getInputList', () => {

  it('multiline and ignoring comma correctly', async () => {
    setInput('cache-from', 'user/app:cache\ntype=local,src=path/to/dir');
-    const res = Util.getInputList('cache-from', true);
+    const res = Util.getInputList('cache-from', {ignoreComma: true});
    expect(res).toEqual(['user/app:cache', 'type=local,src=path/to/dir']);
  });

+  it('multiline and ignoring comment correctly', async () => {
+    setInput('labels', 'foo=bar\nbar=qux#baz');
+    const res = Util.getInputList('labels');
+    expect(res).toEqual(['foo=bar', 'bar=qux#baz']);
+  });
+
+  it('multiline with comment', async () => {
+    setInput('labels', 'foo=bar\nbar=qux#baz');
+    const res = Util.getInputList('labels', {comment: '#'});
+    expect(res).toEqual(['foo=bar', 'bar=qux']);
+  });
+
  it('different new lines and ignoring comma correctly', async () => {
    setInput('cache-from', 'user/app:cache\r\ntype=local,src=path/to/dir');
-    const res = Util.getInputList('cache-from', true);
+    const res = Util.getInputList('cache-from', {ignoreComma: true});
    expect(res).toEqual(['user/app:cache', 'type=local,src=path/to/dir']);
  });

+  it('do not escape surrounding quotes', async () => {
+    setInput('driver-opts', `"env.no_proxy=localhost,127.0.0.1,.mydomain"`);
+    const res = Util.getInputList('driver-opts', {ignoreComma: true, quote: false});
+    expect(res).toEqual(['"env.no_proxy=localhost,127.0.0.1,.mydomain"']);
+  });
+
+  it('escape surrounding quotes', async () => {
+    setInput('platforms', 'linux/amd64\n"linux/arm64,linux/arm/v7"');
+    const res = Util.getInputList('platforms');
+    expect(res).toEqual(['linux/amd64', 'linux/arm64', 'linux/arm/v7']);
+  });
+
  it('multiline values', async () => {
    setInput(
      'secrets',
@@ -88,7 +112,7 @@ bbbbbbb
 ccccccccc"
 FOO=bar`
    );
-    const res = Util.getInputList('secrets', true);
+    const res = Util.getInputList('secrets', {ignoreComma: true});
    expect(res).toEqual([
      'GIT_AUTH_TOKEN=abcdefgh,ijklmno=0123456789',
      `MYSECRET=aaaaaaaa
@@ -111,7 +135,7 @@ FOO=bar
 bbbb
 ccc"`
    );
-    const res = Util.getInputList('secrets', true);
+    const res = Util.getInputList('secrets', {ignoreComma: true});
    expect(res).toEqual([
      'GIT_AUTH_TOKEN=abcdefgh,ijklmno=0123456789',
      `MYSECRET=aaaaaaaa
@@ -134,7 +158,7 @@ bbbbbbb
 ccccccccc
 FOO=bar`
    );
-    const res = Util.getInputList('secrets', true);
+    const res = Util.getInputList('secrets', {ignoreComma: true});
    expect(res).toEqual(['GIT_AUTH_TOKEN=abcdefgh,ijklmno=0123456789', 'MYSECRET=aaaaaaaa', 'bbbbbbb', 'ccccccccc', 'FOO=bar']);
  });

@@ -145,7 +169,7 @@ FOO=bar`
      `"GPG_KEY=${pgp}"
 FOO=bar`
    );
-    const res = Util.getInputList('secrets', true);
+    const res = Util.getInputList('secrets', {ignoreComma: true});
    expect(res).toEqual([`GPG_KEY=${pgp}`, 'FOO=bar']);
  });

@@ -158,7 +182,7 @@ bbbb""bbb
 ccccccccc"
 FOO=bar`
    );
-    const res = Util.getInputList('secrets', true);
+    const res = Util.getInputList('secrets', {ignoreComma: true});
    expect(res).toEqual([
      'GIT_AUTH_TOKEN=abcdefgh,ijklmno=0123456789',
      `MYSECRET=aaaaaaaa
@@ -182,13 +206,64 @@ describe('asyncForEach', () => {
  });
 });

-describe('isValidUrl', () => {
+describe('isValidURL', () => {
  test.each([
    ['https://github.com/docker/buildx.git', true],
    ['https://github.com/docker/buildx.git#refs/pull/648/head', true],
+    ['git@github.com:moby/buildkit.git', false],
+    ['git://github.com/user/repo.git', false],
+    ['github.com/moby/buildkit.git#main', false],
    ['v0.4.1', false]
  ])('given %p', async (url, expected) => {
-    expect(Util.isValidUrl(url)).toEqual(expected);
+    expect(Util.isValidURL(url)).toEqual(expected);
+  });
+});
+
+describe('isValidRef', () => {
+  test.each([
+    ['https://github.com/docker/buildx.git', true],
+    ['https://github.com/docker/buildx.git#refs/pull/648/head', true],
+    ['git@github.com:moby/buildkit.git', true],
+    ['git://github.com/user/repo.git', true],
+    ['github.com/moby/buildkit.git#main', true],
+    ['v0.4.1', false]
+  ])('given %p', async (url, expected) => {
+    expect(Util.isValidRef(url)).toEqual(expected);
+  });
+});
+
+describe('trimPrefix', () => {
+  test.each([
+    ['', 'abc', ''],
+    ['abc', 'a', 'bc'],
+    ['abc', 'ab', 'c'],
+    ['abc', '', 'abc'],
+    ['abc', '', 'abc'],
+    ['abc', 'd', 'abc'],
+    ['abc', 'abc', ''],
+    ['abc', 'abcd', 'abc'],
+    ['abcdabc', 'abc', 'dabc'],
+    ['abcabc', 'abc', 'abc'],
+    ['abcdabc', 'd', 'abcdabc']
+  ])('given %p', async (str, prefix, expected) => {
+    expect(Util.trimPrefix(str, prefix)).toEqual(expected);
+  });
+});
+
+describe('trimSuffix', () => {
+  test.each([
+    ['', 'abc', ''],
+    ['abc', 'c', 'ab'],
+    ['abc', '', 'abc'],
+    ['abc', 'bc', 'a'],
+    ['abc', 'abc', ''],
+    ['abc', 'abcd', 'abc'],
+    ['abc', 'aabc', 'abc'],
+    ['abcdabc', 'abc', 'abcd'],
+    ['abcabc', 'abc', 'abc'],
+    ['abcdabc', 'd', 'abcdabc']
+  ])('given %p', async (str, suffix, expected) => {
+    expect(Util.trimSuffix(str, suffix)).toEqual(expected);
  });
 });

--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -14,9 +14,9 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.

-ARG NODE_VERSION=16
-ARG DOCKER_VERSION=20.10.22
-ARG BUILDX_VERSION=0.10.0
+ARG NODE_VERSION=20
+ARG DOCKER_VERSION=24.0.5
+ARG BUILDX_VERSION=0.11.2

 FROM node:${NODE_VERSION}-alpine AS base
 RUN apk add --no-cache cpio findutils git
@@ -79,7 +79,7 @@ RUN --mount=type=bind,target=.,rw \
    --mount=type=bind,from=buildx,source=/buildx,target=/usr/libexec/docker/cli-plugins/docker-buildx \
    --mount=type=bind,from=buildx,source=/buildx,target=/usr/bin/buildx \
    --mount=type=secret,id=GITHUB_TOKEN \
-  GITHUB_TOKEN=$(cat /run/secrets/GITHUB_TOKEN) yarn run test-coverage --coverageDirectory=/tmp/coverage
+  GITHUB_TOKEN=$(cat /run/secrets/GITHUB_TOKEN) yarn run test:coverage --coverageDirectory=/tmp/coverage

 FROM scratch AS test-coverage
 COPY --from=test /tmp/coverage /
--- a/hack/dockerfiles/license.Dockerfile
+++ b/hack/dockerfiles/license.Dockerfile
@@ -16,7 +16,7 @@

 ARG LICENSE_HOLDER="actions-toolkit authors"
 ARG LICENSE_TYPE="apache"
-ARG LICENSE_FILES=".*\(Dockerfile\|Makefile\|\.js\|\.ts\|\.hcl\|\.sh\)"
+ARG LICENSE_FILES=".*\(Dockerfile\|Makefile\|\.js\|\.ts\|\.hcl\|\.sh|\.ps1\)"
 ARG ADDLICENSE_VERSION="v1.0.0"

 FROM ghcr.io/google/addlicense:${ADDLICENSE_VERSION} AS addlicense
--- a/jest.config.itg.ts
+++ b/jest.config.itg.ts
@@ -0,0 +1,31 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  clearMocks: true,
+  testEnvironment: 'node',
+  moduleFileExtensions: ['js', 'ts'],
+  setupFiles: ['dotenv/config'],
+  testMatch: ['**/*.test.itg.ts'],
+  testTimeout: 1800000, // 30 minutes
+  transform: {
+    '^.+\\.ts$': 'ts-jest'
+  },
+  moduleNameMapper: {
+    '^csv-parse/sync': '<rootDir>/node_modules/csv-parse/dist/cjs/sync.cjs'
+  },
+  verbose: false
+};
--- a/jest.config.ts
+++ b/jest.config.ts
@@ -14,10 +14,17 @@
 * limitations under the License.
 */

+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+
+const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'docker-actions-toolkit-'));
+
 process.env = Object.assign({}, process.env, {
+  TEMP: tmpDir,
  GITHUB_REPOSITORY: 'docker/actions-toolkit',
-  RUNNER_TEMP: '/tmp/github_runner',
-  RUNNER_TOOL_CACHE: '/tmp/github_tool_cache'
+  RUNNER_TEMP: path.join(tmpDir, 'runner-temp'),
+  RUNNER_TOOL_CACHE: path.join(tmpDir, 'runner-tool-cache')
 }) as {
  [key: string]: string;
 };
@@ -34,7 +41,7 @@ module.exports = {
  moduleNameMapper: {
    '^csv-parse/sync': '<rootDir>/node_modules/csv-parse/dist/cjs/sync.cjs'
  },
-  collectCoverageFrom: ['src/**/{!(toolkit.ts),}.ts'],
+  collectCoverageFrom: ['src/**/{!(index.ts),}.ts'],
  coveragePathIgnorePatterns: ['lib/', 'node_modules/', '__mocks__/', '__tests__/'],
  verbose: true
 };
--- a/package.json
+++ b/package.json
@@ -1,12 +1,20 @@
 {
  "name": "@docker/actions-toolkit",
+  "version": "0.0.0+unknown",
  "description": "Toolkit for Docker (GitHub) Actions",
  "scripts": {
    "build": "tsc",
-    "lint": "eslint src/**/*.ts __tests__/**/*.ts",
-    "format": "eslint --fix src/**/*.ts __tests__/**/*.ts",
+    "lint": "yarn run prettier && yarn run eslint",
+    "format": "yarn run prettier:fix && yarn run eslint:fix",
+    "eslint": "eslint --max-warnings=0 .",
+    "eslint:fix": "eslint --fix .",
+    "prettier": "prettier --check \"./**/*.ts\"",
+    "prettier:fix": "prettier --write \"./**/*.ts\"",
    "test": "jest",
-    "test-coverage": "jest --coverage"
+    "test:coverage": "jest --coverage",
+    "test:itg": "jest -c jest.config.itg.ts --runInBand --detectOpenHandles",
+    "test:itg-list": "jest -c jest.config.itg.ts --listTests",
+    "test:itg-coverage": "jest --coverage -c jest.config.itg.ts --runInBand --detectOpenHandles"
  },
  "repository": {
    "type": "git",
@@ -22,9 +30,9 @@
  ],
  "author": "Docker Inc.",
  "license": "Apache-2.0",
-  "packageManager": "yarn@3.3.1",
-  "main": "lib/toolkit.js",
-  "types": "lib/toolkit.d.ts",
+  "packageManager": "yarn@3.6.3",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
  "directories": {
    "lib": "lib",
    "test": "__tests__"
@@ -37,33 +45,41 @@
    "registry": "https://registry.npmjs.org/"
  },
  "dependencies": {
-    "@actions/core": "^1.10.0",
+    "@actions/cache": "^3.2.2",
+    "@actions/core": "^1.10.1",
    "@actions/exec": "^1.1.1",
-    "@actions/github": "^5.1.1",
-    "@actions/http-client": "^2.0.1",
-    "csv-parse": "^5.3.3",
-    "jwt-decode": "^3.1.2",
-    "semver": "^7.3.8",
+    "@actions/github": "^6.0.0",
+    "@actions/http-client": "^2.2.0",
+    "@actions/io": "^1.1.3",
+    "@actions/tool-cache": "^2.0.1",
+    "@octokit/core": "^5.0.2",
+    "@octokit/plugin-rest-endpoint-methods": "^10.2.0",
+    "async-retry": "^1.3.3",
+    "csv-parse": "^5.5.2",
+    "handlebars": "^4.7.8",
+    "jwt-decode": "^4.0.0",
+    "semver": "^7.5.4",
    "tmp": "^0.2.1"
  },
  "devDependencies": {
    "@types/csv-parse": "^1.2.2",
-    "@types/node": "^16.18.11",
-    "@types/semver": "^7.3.13",
+    "@types/js-yaml": "^4.0.5",
+    "@types/node": "^20.5.9",
+    "@types/semver": "^7.5.1",
    "@types/tmp": "^0.2.3",
-    "@typescript-eslint/eslint-plugin": "^5.49.0",
-    "@typescript-eslint/parser": "^5.49.0",
-    "cpy-cli": "^4.2.0",
-    "dotenv": "^16.0.3",
-    "eslint": "^8.33.0",
-    "eslint-config-prettier": "^8.6.0",
-    "eslint-plugin-jest": "^26.9.0",
-    "eslint-plugin-prettier": "^4.2.1",
-    "jest": "^27.5.1",
-    "prettier": "^2.8.3",
-    "rimraf": "^4.1.2",
-    "ts-jest": "^27.1.5",
+    "@typescript-eslint/eslint-plugin": "^6.6.0",
+    "@typescript-eslint/parser": "^6.6.0",
+    "dotenv": "^16.3.1",
+    "eslint": "^8.48.0",
+    "eslint-config-prettier": "^9.0.0",
+    "eslint-plugin-import": "^2.28.1",
+    "eslint-plugin-jest": "^27.2.3",
+    "eslint-plugin-prettier": "^5.0.0",
+    "jest": "^29.6.4",
+    "prettier": "^3.0.3",
+    "rimraf": "^5.0.1",
+    "ts-jest": "^29.1.1",
    "ts-node": "^10.9.1",
-    "typescript": "^4.9.4"
+    "typescript": "^5.2.2"
  }
 }
--- a/src/builder.ts
+++ b/src/builder.ts
@@ -1,148 +0,0 @@
-/**
- * Copyright 2023 actions-toolkit authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import * as exec from '@actions/exec';
-
-import {Buildx} from './buildx';
-import {Context} from './context';
-
-export interface BuilderInfo {
-  name?: string;
-  driver?: string;
-  lastActivity?: Date;
-  nodes: NodeInfo[];
-}
-
-export interface NodeInfo {
-  name?: string;
-  endpoint?: string;
-  driverOpts?: Array<string>;
-  status?: string;
-  buildkitdFlags?: string;
-  buildkitVersion?: string;
-  platforms?: string;
-}
-
-export interface BuilderOpts {
-  context: Context;
-  buildx?: Buildx;
-}
-
-export class Builder {
-  private readonly context: Context;
-  private readonly buildx: Buildx;
-
-  constructor(opts: BuilderOpts) {
-    this.context = opts.context;
-    this.buildx =
-      opts?.buildx ||
-      new Buildx({
-        context: this.context
-      });
-  }
-
-  public async inspect(name: string): Promise<BuilderInfo> {
-    const cmd = this.buildx.getCommand(['inspect', name]);
-    return await exec
-      .getExecOutput(cmd.command, cmd.args, {
-        ignoreReturnCode: true,
-        silent: true
-      })
-      .then(res => {
-        if (res.stderr.length > 0 && res.exitCode != 0) {
-          throw new Error(res.stderr.trim());
-        }
-        return Builder.parseInspect(res.stdout);
-      });
-  }
-
-  public static parseInspect(data: string): BuilderInfo {
-    const builder: BuilderInfo = {
-      nodes: []
-    };
-    let node: NodeInfo = {};
-    for (const line of data.trim().split(`\n`)) {
-      const [key, ...rest] = line.split(':');
-      const value = rest.map(v => v.trim()).join(':');
-      if (key.length == 0 || value.length == 0) {
-        continue;
-      }
-      switch (key.toLowerCase()) {
-        case 'name': {
-          if (builder.name == undefined) {
-            builder.name = value;
-          } else {
-            if (Object.keys(node).length > 0) {
-              builder.nodes.push(node);
-              node = {};
-            }
-            node.name = value;
-          }
-          break;
-        }
-        case 'driver': {
-          builder.driver = value;
-          break;
-        }
-        case 'last activity': {
-          builder.lastActivity = new Date(value);
-          break;
-        }
-        case 'endpoint': {
-          node.endpoint = value;
-          break;
-        }
-        case 'driver options': {
-          node.driverOpts = (value.match(/(\w+)="([^"]*)"/g) || []).map(v => v.replace(/^(.*)="(.*)"$/g, '$1=$2'));
-          break;
-        }
-        case 'status': {
-          node.status = value;
-          break;
-        }
-        case 'flags': {
-          node.buildkitdFlags = value;
-          break;
-        }
-        case 'buildkit': {
-          node.buildkitVersion = value;
-          break;
-        }
-        case 'platforms': {
-          let platforms: Array<string> = [];
-          // if a preferred platform is being set then use only these
-          // https://docs.docker.com/engine/reference/commandline/buildx_inspect/#get-information-about-a-builder-instance
-          if (value.includes('*')) {
-            for (const platform of value.split(', ')) {
-              if (platform.includes('*')) {
-                platforms.push(platform.replace('*', ''));
-              }
-            }
-          } else {
-            // otherwise set all platforms available
-            platforms = value.split(', ');
-          }
-          node.platforms = platforms.join(',');
-          break;
-        }
-      }
-    }
-    if (Object.keys(node).length > 0) {
-      builder.nodes.push(node);
-    }
-    return builder;
-  }
-}
--- a/src/buildkit.ts
+++ b/src/buildkit.ts
@@ -1,140 +0,0 @@
-/**
- * Copyright 2023 actions-toolkit authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import fs from 'fs';
-import * as core from '@actions/core';
-import * as exec from '@actions/exec';
-import * as semver from 'semver';
-
-import {Context} from './context';
-import {Buildx} from './buildx';
-import {Builder, BuilderInfo} from './builder';
-
-export interface BuildKitOpts {
-  context: Context;
-  buildx?: Buildx;
-}
-
-export class BuildKit {
-  private readonly context: Context;
-  private readonly buildx: Buildx;
-  private containerNamePrefix = 'buildx_buildkit_';
-
-  constructor(opts: BuildKitOpts) {
-    this.context = opts.context;
-    this.buildx =
-      opts?.buildx ||
-      new Buildx({
-        context: this.context
-      });
-  }
-
-  private async getBuilderInfo(name: string): Promise<BuilderInfo> {
-    const builder = new Builder({
-      context: this.context,
-      buildx: this.buildx
-    });
-    return builder.inspect(name);
-  }
-
-  public async getVersion(builderName: string): Promise<string | undefined> {
-    const builderInfo = await this.getBuilderInfo(builderName);
-    if (builderInfo.nodes.length == 0) {
-      // a builder always have on node, should not happen.
-      return undefined;
-    }
-    // TODO: get version for all nodes
-    const node = builderInfo.nodes[0];
-    if (!node.buildkitVersion && node.name) {
-      try {
-        return await this.getVersionWithinImage(node.name);
-      } catch (e) {
-        core.warning(e);
-      }
-    }
-    return node.buildkitVersion;
-  }
-
-  private async getVersionWithinImage(nodeName: string): Promise<string> {
-    return exec
-      .getExecOutput(`docker`, ['inspect', '--format', '{{.Config.Image}}', `${this.containerNamePrefix}${nodeName}`], {
-        ignoreReturnCode: true,
-        silent: true
-      })
-      .then(bkitimage => {
-        if (bkitimage.exitCode == 0 && bkitimage.stdout.length > 0) {
-          return exec
-            .getExecOutput(`docker`, ['run', '--rm', bkitimage.stdout.trim(), '--version'], {
-              ignoreReturnCode: true,
-              silent: true
-            })
-            .then(bkitversion => {
-              if (bkitversion.exitCode == 0 && bkitversion.stdout.length > 0) {
-                return `${bkitimage.stdout.trim()} => ${bkitversion.stdout.trim()}`;
-              } else if (bkitversion.stderr.length > 0) {
-                throw new Error(bkitimage.stderr.trim());
-              }
-              return bkitversion.stdout.trim();
-            });
-        } else if (bkitimage.stderr.length > 0) {
-          throw new Error(bkitimage.stderr.trim());
-        }
-        return bkitimage.stdout.trim();
-      });
-  }
-
-  public async versionSatisfies(builderName: string, range: string): Promise<boolean> {
-    const builderInfo = await this.getBuilderInfo(builderName);
-    for (const node of builderInfo.nodes) {
-      let bkversion = node.buildkitVersion;
-      if (!bkversion) {
-        try {
-          bkversion = await this.getVersionWithinImage(node.name || '');
-        } catch (e) {
-          return false;
-        }
-      }
-      // BuildKit version reported by moby is in the format of `v0.11.0-moby`
-      if (builderInfo.driver == 'docker' && !bkversion.endsWith('-moby')) {
-        return false;
-      }
-      if (!semver.satisfies(bkversion.replace(/-moby$/, ''), range)) {
-        return false;
-      }
-    }
-    return true;
-  }
-
-  public generateConfigInline(s: string): string {
-    return this.generateConfig(s, false);
-  }
-
-  public generateConfigFile(s: string): string {
-    return this.generateConfig(s, true);
-  }
-
-  private generateConfig(s: string, file: boolean): string {
-    if (file) {
-      if (!fs.existsSync(s)) {
-        throw new Error(`config file ${s} not found`);
-      }
-      s = fs.readFileSync(s, {encoding: 'utf-8'});
-    }
-    const configFile = this.context.tmpName({tmpdir: this.context.tmpDir()});
-    fs.writeFileSync(configFile, s);
-    return configFile;
-  }
-}
--- a/src/buildkit/buildkit.ts
+++ b/src/buildkit/buildkit.ts
@@ -0,0 +1,104 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import * as core from '@actions/core';
+import * as semver from 'semver';
+
+import {Buildx} from '../buildx/buildx';
+import {Builder} from '../buildx/builder';
+import {Config} from './config';
+import {Exec} from '../exec';
+
+import {BuilderInfo, NodeInfo} from '../types/builder';
+
+export interface BuildKitOpts {
+  buildx?: Buildx;
+}
+
+export class BuildKit {
+  private readonly buildx: Buildx;
+
+  public readonly config: Config;
+
+  constructor(opts?: BuildKitOpts) {
+    this.config = new Config();
+    this.buildx = opts?.buildx || new Buildx();
+  }
+
+  public async getVersion(node: NodeInfo): Promise<string | undefined> {
+    if (!node.buildkit && node.name) {
+      try {
+        return await this.getVersionWithinImage(node.name);
+      } catch (e) {
+        core.warning(e);
+      }
+    }
+    return node.buildkit;
+  }
+
+  private async getVersionWithinImage(nodeName: string): Promise<string> {
+    core.debug(`BuildKit.getVersionWithinImage nodeName: ${nodeName}`);
+    return Exec.getExecOutput(`docker`, ['inspect', '--format', '{{.Config.Image}}', `${Buildx.containerNamePrefix}${nodeName}`], {
+      ignoreReturnCode: true,
+      silent: true
+    }).then(bkitimage => {
+      if (bkitimage.exitCode == 0 && bkitimage.stdout.length > 0) {
+        core.debug(`BuildKit.getVersionWithinImage image: ${bkitimage.stdout.trim()}`);
+        return Exec.getExecOutput(`docker`, ['run', '--rm', bkitimage.stdout.trim(), '--version'], {
+          ignoreReturnCode: true,
+          silent: true
+        }).then(bkitversion => {
+          if (bkitversion.exitCode == 0 && bkitversion.stdout.length > 0) {
+            return `${bkitimage.stdout.trim()} => ${bkitversion.stdout.trim()}`;
+          } else if (bkitversion.stderr.length > 0) {
+            throw new Error(bkitimage.stderr.trim());
+          }
+          return bkitversion.stdout.trim();
+        });
+      } else if (bkitimage.stderr.length > 0) {
+        throw new Error(bkitimage.stderr.trim());
+      }
+      return bkitimage.stdout.trim();
+    });
+  }
+
+  public async versionSatisfies(builderName: string, range: string, builderInfo?: BuilderInfo): Promise<boolean> {
+    if (!builderInfo) {
+      builderInfo = await new Builder({buildx: this.buildx}).inspect(builderName);
+    }
+    for (const node of builderInfo.nodes) {
+      let bkversion = node.buildkit;
+      core.debug(`BuildKit.versionSatisfies ${bkversion}: ${range}`);
+      if (!bkversion) {
+        try {
+          bkversion = await this.getVersionWithinImage(node.name || '');
+        } catch (e) {
+          core.debug(`BuildKit.versionSatisfies ${node.name}: can't get version`);
+          return false;
+        }
+      }
+      core.debug(`BuildKit.versionSatisfies ${node.name}: version ${bkversion}`);
+      // BuildKit version reported by moby is in the format of `v0.11.0-moby`
+      if (builderInfo.driver == 'docker' && !bkversion.endsWith('-moby')) {
+        return false;
+      }
+      if (!semver.satisfies(bkversion.replace(/-moby$/, ''), range)) {
+        return false;
+      }
+    }
+    return true;
+  }
+}
--- a/src/buildkit/config.ts
+++ b/src/buildkit/config.ts
@@ -0,0 +1,41 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'fs';
+
+import {Context} from '../context';
+
+export class Config {
+  public resolveFromString(s: string): string {
+    return this.resolve(s, false);
+  }
+
+  public resolveFromFile(s: string): string {
+    return this.resolve(s, true);
+  }
+
+  private resolve(s: string, file: boolean): string {
+    if (file) {
+      if (!fs.existsSync(s)) {
+        throw new Error(`config file ${s} not found`);
+      }
+      s = fs.readFileSync(s, {encoding: 'utf-8'});
+    }
+    const configFile = Context.tmpName({tmpdir: Context.tmpDir()});
+    fs.writeFileSync(configFile, s);
+    return configFile;
+  }
+}
--- a/src/buildx.ts
+++ b/src/buildx.ts
@@ -1,290 +0,0 @@
-/**
- * Copyright 2023 actions-toolkit authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import fs from 'fs';
-import path from 'path';
-import * as core from '@actions/core';
-import * as exec from '@actions/exec';
-import * as httpm from '@actions/http-client';
-import {parse} from 'csv-parse/sync';
-import * as semver from 'semver';
-
-import {Docker} from './docker';
-import {Context} from './context';
-
-export interface GitHubRelease {
-  id: number;
-  tag_name: string;
-  html_url: string;
-  assets: Array<string>;
-}
-
-export interface BuildxOpts {
-  context: Context;
-  standalone?: boolean;
-}
-
-export class Buildx {
-  private readonly context: Context;
-  private _version: string | undefined;
-
-  public standalone: boolean;
-
-  constructor(opts: BuildxOpts) {
-    this.context = opts.context;
-    this.standalone = opts?.standalone ?? !Docker.isAvailable();
-  }
-
-  public getCommand(args: Array<string>) {
-    return {
-      command: this.standalone ? 'buildx' : 'docker',
-      args: this.standalone ? args : ['buildx', ...args]
-    };
-  }
-
-  public async isAvailable(): Promise<boolean> {
-    const cmd = this.getCommand([]);
-    return await exec
-      .getExecOutput(cmd.command, cmd.args, {
-        ignoreReturnCode: true,
-        silent: true
-      })
-      .then(res => {
-        if (res.stderr.length > 0 && res.exitCode != 0) {
-          return false;
-        }
-        return res.exitCode == 0;
-      })
-      // eslint-disable-next-line @typescript-eslint/no-unused-vars
-      .catch(error => {
-        return false;
-      });
-  }
-
-  public async printInspect(name: string): Promise<void> {
-    const cmd = this.getCommand(['inspect', name]);
-    await exec.exec(cmd.command, cmd.args, {
-      failOnStdErr: false
-    });
-  }
-
-  get version() {
-    return (async () => {
-      if (!this._version) {
-        const cmd = this.getCommand(['version']);
-        this._version = await exec
-          .getExecOutput(cmd.command, cmd.args, {
-            ignoreReturnCode: true,
-            silent: true
-          })
-          .then(res => {
-            if (res.stderr.length > 0 && res.exitCode != 0) {
-              throw new Error(res.stderr.trim());
-            }
-            return Buildx.parseVersion(res.stdout.trim());
-          });
-      }
-      return this._version;
-    })();
-  }
-
-  public async printVersion() {
-    const cmd = this.getCommand(['version']);
-    await exec.exec(cmd.command, cmd.args, {
-      failOnStdErr: false
-    });
-  }
-
-  public static parseVersion(stdout: string): string {
-    const matches = /\sv?([0-9a-f]{7}|[0-9.]+)/.exec(stdout);
-    if (!matches) {
-      throw new Error(`Cannot parse buildx version`);
-    }
-    return matches[1];
-  }
-
-  public async versionSatisfies(range: string, version?: string): Promise<boolean> {
-    const ver = version ?? (await this.version);
-    if (!ver) {
-      return false;
-    }
-    return semver.satisfies(ver, range) || /^[0-9a-f]{7}$/.exec(ver) !== null;
-  }
-
-  public getBuildImageIDFilePath(): string {
-    return path.join(this.context.tmpDir(), 'iidfile').split(path.sep).join(path.posix.sep);
-  }
-
-  public getBuildMetadataFilePath(): string {
-    return path.join(this.context.tmpDir(), 'metadata-file').split(path.sep).join(path.posix.sep);
-  }
-
-  public getBuildImageID(): string | undefined {
-    const iidFile = this.getBuildImageIDFilePath();
-    if (!fs.existsSync(iidFile)) {
-      return undefined;
-    }
-    return fs.readFileSync(iidFile, {encoding: 'utf-8'}).trim();
-  }
-
-  public getBuildMetadata(): string | undefined {
-    const metadataFile = this.getBuildMetadataFilePath();
-    if (!fs.existsSync(metadataFile)) {
-      return undefined;
-    }
-    const content = fs.readFileSync(metadataFile, {encoding: 'utf-8'}).trim();
-    if (content === 'null') {
-      return undefined;
-    }
-    return content;
-  }
-
-  public getDigest(): string | undefined {
-    const metadata = this.getBuildMetadata();
-    if (metadata === undefined) {
-      return undefined;
-    }
-    const metadataJSON = JSON.parse(metadata);
-    if (metadataJSON['containerimage.digest']) {
-      return metadataJSON['containerimage.digest'];
-    }
-    return undefined;
-  }
-
-  public generateBuildSecretString(kvp: string): string {
-    return this.generateBuildSecret(kvp, false);
-  }
-
-  public generateBuildSecretFile(kvp: string): string {
-    return this.generateBuildSecret(kvp, true);
-  }
-
-  public generateBuildSecret(kvp: string, file: boolean): string {
-    const delimiterIndex = kvp.indexOf('=');
-    const key = kvp.substring(0, delimiterIndex);
-    let value = kvp.substring(delimiterIndex + 1);
-    if (key.length == 0 || value.length == 0) {
-      throw new Error(`${kvp} is not a valid secret`);
-    }
-    if (file) {
-      if (!fs.existsSync(value)) {
-        throw new Error(`secret file ${value} not found`);
-      }
-      value = fs.readFileSync(value, {encoding: 'utf-8'});
-    }
-    const secretFile = this.context.tmpName({tmpdir: this.context.tmpDir()});
-    fs.writeFileSync(secretFile, value);
-    return `id=${key},src=${secretFile}`;
-  }
-
-  public getProvenanceInput(name: string): string {
-    const input = core.getInput(name);
-    if (!input) {
-      // if input is not set returns empty string
-      return input;
-    }
-    const builderID = this.context.provenanceBuilderID;
-    try {
-      return core.getBooleanInput(name) ? `builder-id=${builderID}` : 'false';
-    } catch (err) {
-      // not a valid boolean, so we assume it's a string
-      return this.getProvenanceAttrs(input);
-    }
-  }
-
-  public getProvenanceAttrs(input: string): string {
-    if (!input) {
-      return `builder-id=${this.context.provenanceBuilderID}`;
-    }
-    // parse attributes from input
-    const fields = parse(input, {
-      relaxColumnCount: true,
-      skipEmptyLines: true
-    })[0];
-    // check if builder-id attribute exists in the input
-    for (const field of fields) {
-      const parts = field
-        .toString()
-        .split(/(?<=^[^=]+?)=/)
-        .map(item => item.trim());
-      if (parts[0] == 'builder-id') {
-        return input;
-      }
-    }
-    // if not add builder-id attribute
-    return `${input},builder-id=${this.context.provenanceBuilderID}`;
-  }
-
-  public static async getRelease(version: string): Promise<GitHubRelease> {
-    // FIXME: Use https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-releases.json when repo public
-    const url = `https://raw.githubusercontent.com/docker/buildx/master/.github/releases.json`;
-    const http: httpm.HttpClient = new httpm.HttpClient('docker-actions-toolkit');
-    const resp: httpm.HttpClientResponse = await http.get(url);
-    const body = await resp.readBody();
-    const statusCode = resp.message.statusCode || 500;
-    if (statusCode >= 400) {
-      throw new Error(`Failed to get Buildx release ${version} from ${url} with status code ${statusCode}: ${body}`);
-    }
-    const releases = <Record<string, GitHubRelease>>JSON.parse(body);
-    if (!releases[version]) {
-      throw new Error(`Cannot find Buildx release ${version} in ${url}`);
-    }
-    return releases[version];
-  }
-
-  public static hasLocalExporter(exporters: string[]): boolean {
-    return Buildx.hasExporterType('local', exporters);
-  }
-
-  public static hasTarExporter(exporters: string[]): boolean {
-    return Buildx.hasExporterType('tar', exporters);
-  }
-
-  public static hasDockerExporter(exporters: string[], load?: boolean): boolean {
-    return load ?? Buildx.hasExporterType('docker', exporters);
-  }
-
-  public static hasExporterType(name: string, exporters: string[]): boolean {
-    const records = parse(exporters.join(`\n`), {
-      delimiter: ',',
-      trim: true,
-      columns: false,
-      relaxColumnCount: true
-    });
-    for (const record of records) {
-      if (record.length == 1 && !record[0].startsWith('type=')) {
-        // Local if no type is defined
-        // https://github.com/docker/buildx/blob/d2bf42f8b4784d83fde17acb3ed84703ddc2156b/build/output.go#L29-L43
-        return name == 'local';
-      }
-      for (const [key, value] of record.map(chunk => chunk.split('=').map(item => item.trim()))) {
-        if (key == 'type' && value == name) {
-          return true;
-        }
-      }
-    }
-    return false;
-  }
-
-  public static hasGitAuthTokenSecret(secrets: string[]): boolean {
-    for (const secret of secrets) {
-      if (secret.startsWith('GIT_AUTH_TOKEN=')) {
-        return true;
-      }
-    }
-    return false;
-  }
-}
--- a/src/buildx/bake.ts
+++ b/src/buildx/bake.ts
@@ -0,0 +1,108 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {Buildx} from './buildx';
+import {Exec} from '../exec';
+import {Inputs} from './inputs';
+import {Util} from '../util';
+
+import {BakeDefinition} from '../types/bake';
+
+export interface BakeOpts {
+  buildx?: Buildx;
+}
+
+export class Bake {
+  private readonly buildx: Buildx;
+
+  constructor(opts?: BakeOpts) {
+    this.buildx = opts?.buildx || new Buildx();
+  }
+
+  public async parseDefinitions(sources: Array<string>, targets?: Array<string>, overrides?: Array<string>, load?: boolean, push?: boolean, workdir?: string): Promise<BakeDefinition> {
+    const args = ['bake'];
+
+    let remoteDef;
+    const files: Array<string> = [];
+    if (sources) {
+      for (const source of sources.map(v => v.trim())) {
+        if (source.length == 0) {
+          continue;
+        }
+        if (!Util.isValidRef(source)) {
+          files.push(source);
+          continue;
+        }
+        if (remoteDef) {
+          throw new Error(`Only one remote bake definition is allowed`);
+        }
+        remoteDef = source;
+      }
+    }
+    if (remoteDef) {
+      args.push(remoteDef);
+    }
+    for (const file of files) {
+      args.push('--file', file);
+    }
+    if (overrides) {
+      for (const override of overrides) {
+        args.push('--set', override);
+      }
+    }
+    if (load) {
+      args.push('--load');
+    }
+    if (push) {
+      args.push('--push');
+    }
+
+    const printCmd = await this.buildx.getCommand([...args, '--print', ...(targets || [])]);
+    return await Exec.getExecOutput(printCmd.command, printCmd.args, {
+      cwd: workdir,
+      ignoreReturnCode: true,
+      silent: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(res.stderr);
+      }
+      return <BakeDefinition>JSON.parse(res.stdout.trim());
+    });
+  }
+
+  public static hasLocalExporter(def: BakeDefinition): boolean {
+    return Inputs.hasExporterType('local', Bake.exporters(def));
+  }
+
+  public static hasTarExporter(def: BakeDefinition): boolean {
+    return Inputs.hasExporterType('tar', Bake.exporters(def));
+  }
+
+  public static hasDockerExporter(def: BakeDefinition, load?: boolean): boolean {
+    return load || Inputs.hasExporterType('docker', Bake.exporters(def));
+  }
+
+  private static exporters(def: BakeDefinition): Array<string> {
+    const exporters = new Array<string>();
+    for (const key in def.target) {
+      const target = def.target[key];
+      if (target.output) {
+        exporters.push(...target.output);
+      }
+    }
+    return exporters;
+  }
+}
--- a/src/buildx/builder.ts
+++ b/src/buildx/builder.ts
@@ -0,0 +1,215 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import * as core from '@actions/core';
+
+import {Buildx} from './buildx';
+import {Exec} from '../exec';
+
+import {BuilderInfo, GCPolicy, NodeInfo} from '../types/builder';
+
+export interface BuilderOpts {
+  buildx?: Buildx;
+}
+
+export class Builder {
+  private readonly buildx: Buildx;
+
+  constructor(opts?: BuilderOpts) {
+    this.buildx = opts?.buildx || new Buildx();
+  }
+
+  public async exists(name: string): Promise<boolean> {
+    const cmd = await this.buildx.getCommand(['inspect', name]);
+
+    const ok: boolean = await Exec.getExecOutput(cmd.command, cmd.args, {
+      ignoreReturnCode: true,
+      silent: true
+    })
+      .then(res => {
+        if (res.stderr.length > 0 && res.exitCode != 0) {
+          core.debug(`Builder.exists cmd err: ${res.stderr.trim()}`);
+          return false;
+        }
+        return res.exitCode == 0;
+      })
+      .catch(error => {
+        core.debug(`Builder.exists error: ${error}`);
+        return false;
+      });
+
+    core.debug(`Builder.exists: ${ok}`);
+    return ok;
+  }
+
+  public async inspect(name: string): Promise<BuilderInfo> {
+    const cmd = await this.buildx.getCommand(['inspect', name]);
+    return await Exec.getExecOutput(cmd.command, cmd.args, {
+      ignoreReturnCode: true,
+      silent: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(res.stderr.trim());
+      }
+      return Builder.parseInspect(res.stdout);
+    });
+  }
+
+  public static parseInspect(data: string): BuilderInfo {
+    const builder: BuilderInfo = {
+      nodes: []
+    };
+    let parsingType: string | undefined;
+    let currentNode: NodeInfo = {};
+    let currentGCPolicy: GCPolicy | undefined;
+    for (const line of data.trim().split(`\n`)) {
+      const [key, ...rest] = line.split(':');
+      const lkey = key.toLowerCase();
+      const value = rest.map(v => v.trim()).join(':');
+      if (key.length == 0) {
+        continue;
+      }
+      switch (true) {
+        case lkey == 'name': {
+          parsingType = undefined;
+          if (builder.name == undefined) {
+            builder.name = value;
+          } else {
+            if (currentGCPolicy && currentNode.gcPolicy) {
+              currentNode.gcPolicy.push(currentGCPolicy);
+              currentGCPolicy = undefined;
+            }
+            if (currentNode.name) {
+              builder.nodes.push(currentNode);
+            }
+            currentNode = {name: value};
+          }
+          break;
+        }
+        case lkey == 'driver': {
+          parsingType = undefined;
+          builder.driver = value;
+          break;
+        }
+        case lkey == 'last activity': {
+          parsingType = undefined;
+          builder.lastActivity = new Date(value);
+          break;
+        }
+        case lkey == 'endpoint': {
+          parsingType = undefined;
+          currentNode.endpoint = value;
+          break;
+        }
+        case lkey == 'driver options': {
+          parsingType = undefined;
+          currentNode['driver-opts'] = (value.match(/([a-zA-Z0-9_.]+)="([^"]*)"/g) || []).map(v => v.replace(/^(.*)="(.*)"$/g, '$1=$2'));
+          break;
+        }
+        case lkey == 'status': {
+          parsingType = undefined;
+          currentNode.status = value;
+          break;
+        }
+        case lkey == 'flags': {
+          parsingType = undefined;
+          currentNode['buildkitd-flags'] = value;
+          break;
+        }
+        case lkey == 'buildkit': {
+          parsingType = undefined;
+          currentNode.buildkit = value;
+          break;
+        }
+        case lkey == 'platforms': {
+          parsingType = undefined;
+          if (!value) {
+            break;
+          }
+          let platforms: Array<string> = [];
+          // if a preferred platform is being set then use only these
+          // https://docs.docker.com/engine/reference/commandline/buildx_inspect/#get-information-about-a-builder-instance
+          if (value.includes('*')) {
+            for (const platform of value.split(', ')) {
+              if (platform.includes('*')) {
+                platforms.push(platform.replace(/\*/g, ''));
+              }
+            }
+          } else {
+            // otherwise set all platforms available
+            platforms = value.split(', ');
+          }
+          currentNode.platforms = platforms.join(',');
+          break;
+        }
+        case lkey == 'labels': {
+          parsingType = 'label';
+          currentNode.labels = {};
+          break;
+        }
+        case lkey.startsWith('gc policy rule#'): {
+          parsingType = 'gcpolicy';
+          if (currentNode.gcPolicy && currentGCPolicy) {
+            currentNode.gcPolicy.push(currentGCPolicy);
+            currentGCPolicy = undefined;
+          }
+          break;
+        }
+        default: {
+          switch (parsingType || '') {
+            case 'label': {
+              currentNode.labels = currentNode.labels || {};
+              currentNode.labels[key.trim()] = value;
+              break;
+            }
+            case 'gcpolicy': {
+              currentNode.gcPolicy = currentNode.gcPolicy || [];
+              currentGCPolicy = currentGCPolicy || {};
+              switch (lkey.trim()) {
+                case 'all': {
+                  currentGCPolicy.all = value == 'true';
+                  break;
+                }
+                case 'filters': {
+                  if (value) {
+                    currentGCPolicy.filter = value.split(',');
+                  }
+                  break;
+                }
+                case 'keep duration': {
+                  currentGCPolicy.keepDuration = value;
+                  break;
+                }
+                case 'keep bytes': {
+                  currentGCPolicy.keepBytes = value;
+                  break;
+                }
+              }
+              break;
+            }
+          }
+        }
+      }
+    }
+    if (currentGCPolicy && currentNode.gcPolicy) {
+      currentNode.gcPolicy.push(currentGCPolicy);
+    }
+    if (currentNode.name) {
+      builder.nodes.push(currentNode);
+    }
+    return builder;
+  }
+}
--- a/src/buildx/buildx.ts
+++ b/src/buildx/buildx.ts
@@ -0,0 +1,178 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'fs';
+import path from 'path';
+import * as core from '@actions/core';
+import * as semver from 'semver';
+
+import {Docker} from '../docker/docker';
+import {Exec} from '../exec';
+
+import {Cert} from '../types/buildx';
+
+export interface BuildxOpts {
+  standalone?: boolean;
+}
+
+export class Buildx {
+  private _version: string;
+  private _versionOnce: boolean;
+  private readonly _standalone: boolean | undefined;
+
+  public static readonly containerNamePrefix = 'buildx_buildkit_';
+
+  constructor(opts?: BuildxOpts) {
+    this._standalone = opts?.standalone;
+    this._version = '';
+    this._versionOnce = false;
+  }
+
+  static get configDir(): string {
+    return process.env.BUILDX_CONFIG || path.join(Docker.configDir, 'buildx');
+  }
+
+  static get certsDir(): string {
+    return path.join(Buildx.configDir, 'certs');
+  }
+
+  public async isStandalone(): Promise<boolean> {
+    const standalone = this._standalone ?? !(await Docker.isAvailable());
+    core.debug(`Buildx.isStandalone: ${standalone}`);
+    return standalone;
+  }
+
+  public async getCommand(args: Array<string>) {
+    const standalone = await this.isStandalone();
+    return {
+      command: standalone ? 'buildx' : 'docker',
+      args: standalone ? args : ['buildx', ...args]
+    };
+  }
+
+  public async isAvailable(): Promise<boolean> {
+    const cmd = await this.getCommand([]);
+
+    const ok: boolean = await Exec.getExecOutput(cmd.command, cmd.args, {
+      ignoreReturnCode: true,
+      silent: true
+    })
+      .then(res => {
+        if (res.stderr.length > 0 && res.exitCode != 0) {
+          core.debug(`Buildx.isAvailable cmd err: ${res.stderr.trim()}`);
+          return false;
+        }
+        return res.exitCode == 0;
+      })
+      .catch(error => {
+        core.debug(`Buildx.isAvailable error: ${error}`);
+        return false;
+      });
+
+    core.debug(`Buildx.isAvailable: ${ok}`);
+    return ok;
+  }
+
+  public async printInspect(name: string): Promise<void> {
+    const cmd = await this.getCommand(['inspect', name]);
+    await Exec.exec(cmd.command, cmd.args, {
+      failOnStdErr: false
+    });
+  }
+
+  public async version(): Promise<string> {
+    if (this._versionOnce) {
+      return this._version;
+    }
+    this._versionOnce = true;
+    const cmd = await this.getCommand(['version']);
+    this._version = await Exec.getExecOutput(cmd.command, cmd.args, {
+      ignoreReturnCode: true,
+      silent: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(res.stderr.trim());
+      }
+      return Buildx.parseVersion(res.stdout.trim());
+    });
+    return this._version;
+  }
+
+  public async printVersion() {
+    const cmd = await this.getCommand(['version']);
+    await Exec.exec(cmd.command, cmd.args, {
+      failOnStdErr: false
+    });
+  }
+
+  public static parseVersion(stdout: string): string {
+    const matches = /\sv?([0-9a-f]{7}|[0-9.]+)/.exec(stdout);
+    if (!matches) {
+      throw new Error(`Cannot parse buildx version`);
+    }
+    return matches[1];
+  }
+
+  public async versionSatisfies(range: string, version?: string): Promise<boolean> {
+    const ver = version ?? (await this.version());
+    if (!ver) {
+      core.debug(`Buildx.versionSatisfies false: undefined version`);
+      return false;
+    }
+    const res = semver.satisfies(ver, range) || /^[0-9a-f]{7}$/.exec(ver) !== null;
+    core.debug(`Buildx.versionSatisfies ${ver} statisfies ${range}: ${res}`);
+    return res;
+  }
+
+  public static resolveCertsDriverOpts(driver: string, endpoint: string, cert: Cert): Array<string> {
+    let url: URL;
+    try {
+      url = new URL(endpoint);
+    } catch (e) {
+      return [];
+    }
+    if (url.protocol != 'tcp:') {
+      return [];
+    }
+    const driverOpts: Array<string> = [];
+    if (Object.keys(cert).length == 0) {
+      return driverOpts;
+    }
+    let host = url.hostname;
+    if (url.port.length > 0) {
+      host += `-${url.port}`;
+    }
+    if (cert.cacert !== undefined) {
+      const cacertpath = path.join(Buildx.certsDir, `cacert_${host}.pem`);
+      fs.writeFileSync(cacertpath, cert.cacert);
+      driverOpts.push(`cacert=${cacertpath}`);
+    }
+    if (cert.cert !== undefined) {
+      const certpath = path.join(Buildx.certsDir, `cert_${host}.pem`);
+      fs.writeFileSync(certpath, cert.cert);
+      driverOpts.push(`cert=${certpath}`);
+    }
+    if (cert.key !== undefined) {
+      const keypath = path.join(Buildx.certsDir, `key_${host}.pem`);
+      fs.writeFileSync(keypath, cert.key);
+      driverOpts.push(`key=${keypath}`);
+    }
+    if (driver != 'remote') {
+      return [];
+    }
+    return driverOpts;
+  }
+}
--- a/src/buildx/inputs.ts
+++ b/src/buildx/inputs.ts
@@ -0,0 +1,186 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'fs';
+import path from 'path';
+import * as core from '@actions/core';
+import {parse} from 'csv-parse/sync';
+
+import {Context} from '../context';
+
+const parseKvp = (kvp: string): [string, string] => {
+  const delimiterIndex = kvp.indexOf('=');
+  const key = kvp.substring(0, delimiterIndex);
+  const value = kvp.substring(delimiterIndex + 1);
+
+  if (key.length == 0 || value.length == 0) {
+    throw new Error(`${kvp} is not a valid secret`);
+  }
+
+  return [key, value];
+};
+
+export class Inputs {
+  public static getBuildImageIDFilePath(): string {
+    return path.join(Context.tmpDir(), 'iidfile');
+  }
+
+  public static getBuildMetadataFilePath(): string {
+    return path.join(Context.tmpDir(), 'metadata-file');
+  }
+
+  public static resolveBuildImageID(): string | undefined {
+    const iidFile = Inputs.getBuildImageIDFilePath();
+    if (!fs.existsSync(iidFile)) {
+      return undefined;
+    }
+    return fs.readFileSync(iidFile, {encoding: 'utf-8'}).trim();
+  }
+
+  public static resolveBuildMetadata(): string | undefined {
+    const metadataFile = Inputs.getBuildMetadataFilePath();
+    if (!fs.existsSync(metadataFile)) {
+      return undefined;
+    }
+    const content = fs.readFileSync(metadataFile, {encoding: 'utf-8'}).trim();
+    if (content === 'null') {
+      return undefined;
+    }
+    return content;
+  }
+
+  public static resolveDigest(): string | undefined {
+    const metadata = Inputs.resolveBuildMetadata();
+    if (metadata === undefined) {
+      return undefined;
+    }
+    const metadataJSON = JSON.parse(metadata);
+    if (metadataJSON['containerimage.digest']) {
+      return metadataJSON['containerimage.digest'];
+    }
+    return undefined;
+  }
+
+  public static resolveBuildSecretString(kvp: string): string {
+    return Inputs.resolveBuildSecret(kvp, false);
+  }
+
+  public static resolveBuildSecretFile(kvp: string): string {
+    return Inputs.resolveBuildSecret(kvp, true);
+  }
+
+  public static resolveBuildSecretEnv(kvp: string): string {
+    const [key, value] = parseKvp(kvp);
+
+    return `id=${key},env=${value}`;
+  }
+
+  public static resolveBuildSecret(kvp: string, file: boolean): string {
+    const [key, _value] = parseKvp(kvp);
+
+    let value = _value;
+
+    if (file) {
+      if (!fs.existsSync(value)) {
+        throw new Error(`secret file ${value} not found`);
+      }
+      value = fs.readFileSync(value, {encoding: 'utf-8'});
+    }
+    const secretFile = Context.tmpName({tmpdir: Context.tmpDir()});
+    fs.writeFileSync(secretFile, value);
+    return `id=${key},src=${secretFile}`;
+  }
+
+  public static getProvenanceInput(name: string): string {
+    const input = core.getInput(name);
+    if (!input) {
+      // if input is not set returns empty string
+      return input;
+    }
+    try {
+      return core.getBooleanInput(name) ? `builder-id=${Context.provenanceBuilderID()}` : 'false';
+    } catch (err) {
+      // not a valid boolean, so we assume it's a string
+      return Inputs.resolveProvenanceAttrs(input);
+    }
+  }
+
+  public static resolveProvenanceAttrs(input: string): string {
+    if (!input) {
+      return `builder-id=${Context.provenanceBuilderID()}`;
+    }
+    // parse attributes from input
+    const fields = parse(input, {
+      relaxColumnCount: true,
+      skipEmptyLines: true
+    })[0];
+    // check if builder-id attribute exists in the input
+    for (const field of fields) {
+      const parts = field
+        .toString()
+        .split(/(?<=^[^=]+?)=/)
+        .map(item => item.trim());
+      if (parts[0] == 'builder-id') {
+        return input;
+      }
+    }
+    // if not add builder-id attribute
+    return `${input},builder-id=${Context.provenanceBuilderID()}`;
+  }
+
+  public static hasLocalExporter(exporters: string[]): boolean {
+    return Inputs.hasExporterType('local', exporters);
+  }
+
+  public static hasTarExporter(exporters: string[]): boolean {
+    return Inputs.hasExporterType('tar', exporters);
+  }
+
+  public static hasDockerExporter(exporters: string[], load?: boolean): boolean {
+    return load || Inputs.hasExporterType('docker', exporters);
+  }
+
+  public static hasExporterType(name: string, exporters: string[]): boolean {
+    const records = parse(exporters.join(`\n`), {
+      delimiter: ',',
+      trim: true,
+      columns: false,
+      relaxColumnCount: true
+    });
+    for (const record of records) {
+      if (record.length == 1 && !record[0].startsWith('type=')) {
+        // Local if no type is defined
+        // https://github.com/docker/buildx/blob/d2bf42f8b4784d83fde17acb3ed84703ddc2156b/build/output.go#L29-L43
+        return name == 'local';
+      }
+      for (const [key, value] of record.map(chunk => chunk.split('=').map(item => item.trim()))) {
+        if (key == 'type' && value == name) {
+          return true;
+        }
+      }
+    }
+    return false;
+  }
+
+  public static hasGitAuthTokenSecret(secrets: string[]): boolean {
+    for (const secret of secrets) {
+      if (secret.startsWith('GIT_AUTH_TOKEN=')) {
+        return true;
+      }
+    }
+    return false;
+  }
+}
--- a/src/buildx/install.ts
+++ b/src/buildx/install.ts
@@ -0,0 +1,374 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import crypto from 'crypto';
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import * as core from '@actions/core';
+import * as httpm from '@actions/http-client';
+import * as tc from '@actions/tool-cache';
+import * as cache from '@actions/cache';
+import * as semver from 'semver';
+import * as util from 'util';
+
+import {Buildx} from './buildx';
+import {Context} from '../context';
+import {Exec} from '../exec';
+import {Docker} from '../docker/docker';
+import {Git} from '../git';
+import {Util} from '../util';
+
+import {DownloadVersion} from '../types/buildx';
+import {GitHubRelease} from '../types/github';
+
+export interface InstallOpts {
+  standalone?: boolean;
+}
+
+export class Install {
+  private readonly _standalone: boolean | undefined;
+
+  constructor(opts?: InstallOpts) {
+    this._standalone = opts?.standalone;
+  }
+
+  /*
+   * Download buildx binary from GitHub release
+   * @param version semver version or latest
+   * @returns path to the buildx binary
+   */
+  public async download(v: string): Promise<string> {
+    const version: DownloadVersion = await Install.getDownloadVersion(v);
+    core.debug(`Install.download version: ${version.version}`);
+
+    const release: GitHubRelease = await Install.getRelease(version);
+    core.debug(`Install.download release tag name: ${release.tag_name}`);
+
+    const vspec = await this.vspec(release.tag_name);
+    core.debug(`Install.download vspec: ${vspec}`);
+
+    const c = semver.clean(vspec) || '';
+    if (!semver.valid(c)) {
+      throw new Error(`Invalid Buildx version "${vspec}".`);
+    }
+
+    const installCache = new InstallCache(version.key != 'official' ? `buildx-dl-bin-${version.key}` : 'buildx-dl-bin', vspec);
+
+    const cacheFoundPath = await installCache.find();
+    if (cacheFoundPath) {
+      core.info(`Buildx binary found in ${cacheFoundPath}`);
+      return cacheFoundPath;
+    }
+
+    const downloadURL = util.format(version.downloadURL, vspec, this.filename(vspec));
+    core.info(`Downloading ${downloadURL}`);
+
+    const htcDownloadPath = await tc.downloadTool(downloadURL);
+    core.debug(`Install.download htcDownloadPath: ${htcDownloadPath}`);
+
+    const cacheSavePath = await installCache.save(htcDownloadPath);
+    core.info(`Cached to ${cacheSavePath}`);
+    return cacheSavePath;
+  }
+
+  /*
+   * Build buildx binary from source
+   * @param gitContext git repo context
+   * @returns path to the buildx binary
+   */
+  public async build(gitContext: string): Promise<string> {
+    const vspec = await this.vspec(gitContext);
+    core.debug(`Install.build vspec: ${vspec}`);
+
+    const installCache = new InstallCache('buildx-build-bin', vspec);
+
+    const cacheFoundPath = await installCache.find();
+    if (cacheFoundPath) {
+      core.info(`Buildx binary found in ${cacheFoundPath}`);
+      return cacheFoundPath;
+    }
+
+    const outputDir = path.join(Context.tmpDir(), 'buildx-build-cache');
+    const buildCmd = await this.buildCommand(gitContext, outputDir);
+
+    const buildBinPath = await Exec.getExecOutput(buildCmd.command, buildCmd.args, {
+      ignoreReturnCode: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(`build failed with: ${res.stderr.match(/(.*)\s*$/)?.[0]?.trim() ?? 'unknown error'}`);
+      }
+      return `${outputDir}/buildx`;
+    });
+
+    const cacheSavePath = await installCache.save(buildBinPath);
+    core.info(`Cached to ${cacheSavePath}`);
+    return cacheSavePath;
+  }
+
+  public async installStandalone(binPath: string, dest?: string): Promise<string> {
+    core.info('Standalone mode');
+    dest = dest || Context.tmpDir();
+
+    const binDir = path.join(dest, 'buildx-bin-standalone');
+    if (!fs.existsSync(binDir)) {
+      fs.mkdirSync(binDir, {recursive: true});
+    }
+    const binName: string = os.platform() == 'win32' ? 'buildx.exe' : 'buildx';
+    const buildxPath: string = path.join(binDir, binName);
+    fs.copyFileSync(binPath, buildxPath);
+
+    core.info('Fixing perms');
+    fs.chmodSync(buildxPath, '0755');
+
+    core.addPath(binDir);
+    core.info('Added Buildx to PATH');
+
+    core.info(`Binary path: ${buildxPath}`);
+    return buildxPath;
+  }
+
+  public async installPlugin(binPath: string, dest?: string): Promise<string> {
+    core.info('Docker plugin mode');
+    dest = dest || Docker.configDir;
+
+    const pluginsDir: string = path.join(dest, 'cli-plugins');
+    if (!fs.existsSync(pluginsDir)) {
+      fs.mkdirSync(pluginsDir, {recursive: true});
+    }
+    const binName: string = os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx';
+    const pluginPath: string = path.join(pluginsDir, binName);
+    fs.copyFileSync(binPath, pluginPath);
+
+    core.info('Fixing perms');
+    fs.chmodSync(pluginPath, '0755');
+
+    core.info(`Plugin path: ${pluginPath}`);
+    return pluginPath;
+  }
+
+  private async buildCommand(gitContext: string, outputDir: string): Promise<{args: Array<string>; command: string}> {
+    const buildxStandaloneFound = await new Buildx({standalone: true}).isAvailable();
+    const buildxPluginFound = await new Buildx({standalone: false}).isAvailable();
+
+    let buildStandalone = false;
+    if ((await this.isStandalone()) && buildxStandaloneFound) {
+      core.debug(`Install.buildCommand: Buildx standalone found, build with it`);
+      buildStandalone = true;
+    } else if (!(await this.isStandalone()) && buildxPluginFound) {
+      core.debug(`Install.buildCommand: Buildx plugin found, build with it`);
+      buildStandalone = false;
+    } else if (buildxStandaloneFound) {
+      core.debug(`Install.buildCommand: Buildx plugin not found, but standalone found so trying to build with it`);
+      buildStandalone = true;
+    } else if (buildxPluginFound) {
+      core.debug(`Install.buildCommand: Buildx standalone not found, but plugin found so trying to build with it`);
+      buildStandalone = false;
+    } else {
+      throw new Error(`Neither buildx standalone or plugin have been found to build from ref ${gitContext}`);
+    }
+
+    const args = ['build', '--target', 'binaries', '--platform', 'local', '--build-arg', 'BUILDKIT_CONTEXT_KEEP_GIT_DIR=1', '--output', `type=local,dest=${outputDir}`];
+    if (process.env.GIT_AUTH_TOKEN) {
+      args.push('--secret', 'id=GIT_AUTH_TOKEN');
+    }
+    args.push(gitContext);
+
+    //prettier-ignore
+    return await new Buildx({standalone: buildStandalone}).getCommand(args);
+  }
+
+  private async isStandalone(): Promise<boolean> {
+    const standalone = this._standalone ?? !(await Docker.isAvailable());
+    core.debug(`Install.isStandalone: ${standalone}`);
+    return standalone;
+  }
+
+  private filename(version: string): string {
+    let arch: string;
+    switch (os.arch()) {
+      case 'x64': {
+        arch = 'amd64';
+        break;
+      }
+      case 'ppc64': {
+        arch = 'ppc64le';
+        break;
+      }
+      case 'arm': {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const arm_version = (process.config.variables as any).arm_version;
+        arch = arm_version ? 'arm-v' + arm_version : 'arm';
+        break;
+      }
+      default: {
+        arch = os.arch();
+        break;
+      }
+    }
+    const platform: string = os.platform() == 'win32' ? 'windows' : os.platform();
+    const ext: string = os.platform() == 'win32' ? '.exe' : '';
+    return util.format('buildx-v%s.%s-%s%s', version, platform, arch, ext);
+  }
+
+  /*
+   * Get version spec (fingerprint) for cache key. If versionOrRef is a valid
+   * Git context, then return the SHA of the ref along the repo and owner and
+   * create a hash of it. Otherwise, return the versionOrRef (semver) as is
+   * without the 'v' prefix.
+   */
+  private async vspec(versionOrRef: string): Promise<string> {
+    if (!Util.isValidRef(versionOrRef)) {
+      const v = versionOrRef.replace(/^v+|v+$/g, '');
+      core.info(`Use ${v} version spec cache key for ${versionOrRef}`);
+      return v;
+    }
+
+    // eslint-disable-next-line prefer-const
+    let [baseURL, ref] = versionOrRef.split('#');
+    if (ref.length == 0) {
+      ref = 'master';
+    }
+
+    let sha: string;
+    if (ref.match(/^[0-9a-fA-F]{40}$/)) {
+      sha = ref;
+    } else {
+      sha = await Git.remoteSha(baseURL, ref, process.env.GIT_AUTH_TOKEN);
+    }
+
+    const [owner, repo] = baseURL.substring('https://github.com/'.length).split('/');
+    const key = `${owner}/${Util.trimSuffix(repo, '.git')}/${sha}`;
+    const hash = crypto.createHash('sha256').update(key).digest('hex');
+    core.info(`Use ${hash} version spec cache key for ${key}`);
+    return hash;
+  }
+
+  public static async getDownloadVersion(v: string): Promise<DownloadVersion> {
+    let [repoKey, version] = v.split(':');
+    if (!version) {
+      version = repoKey;
+      repoKey = 'official';
+    }
+    switch (repoKey) {
+      case 'official': {
+        return {
+          key: repoKey,
+          version: version,
+          downloadURL: 'https://github.com/docker/buildx/releases/download/v%s/%s',
+          releasesURL: 'https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-releases.json'
+        };
+      }
+      case 'lab': {
+        return {
+          key: repoKey,
+          version: version,
+          downloadURL: 'https://github.com/docker/buildx-desktop/releases/download/v%s/%s',
+          releasesURL: 'https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-lab-releases.json'
+        };
+      }
+      default: {
+        throw new Error(`Cannot find buildx version for ${v}`);
+      }
+    }
+  }
+
+  public static async getRelease(version: DownloadVersion): Promise<GitHubRelease> {
+    const http: httpm.HttpClient = new httpm.HttpClient('docker-actions-toolkit');
+    const resp: httpm.HttpClientResponse = await http.get(version.releasesURL);
+    const body = await resp.readBody();
+    const statusCode = resp.message.statusCode || 500;
+    if (statusCode >= 400) {
+      throw new Error(`Failed to get Buildx releases from ${version.releasesURL} with status code ${statusCode}: ${body}`);
+    }
+    const releases = <Record<string, GitHubRelease>>JSON.parse(body);
+    if (!releases[version.version]) {
+      throw new Error(`Cannot find Buildx release ${version.version} in ${version.releasesURL}`);
+    }
+    return releases[version.version];
+  }
+}
+
+class InstallCache {
+  private readonly htcName: string;
+  private readonly htcVersion: string;
+  private readonly ghaCacheKey: string;
+  private readonly cacheDir: string;
+  private readonly cacheFile: string;
+  private readonly cachePath: string;
+
+  constructor(htcName: string, htcVersion: string) {
+    this.htcName = htcName;
+    this.htcVersion = htcVersion;
+    this.ghaCacheKey = util.format('%s-%s-%s', this.htcName, this.htcVersion, this.platform());
+    this.cacheDir = path.join(Buildx.configDir, '.bin', htcVersion, this.platform());
+    this.cacheFile = os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx';
+    this.cachePath = path.join(this.cacheDir, this.cacheFile);
+    if (!fs.existsSync(this.cacheDir)) {
+      fs.mkdirSync(this.cacheDir, {recursive: true});
+    }
+  }
+
+  public async save(file: string): Promise<string> {
+    core.debug(`InstallCache.save ${file}`);
+    const cachePath = this.copyToCache(file);
+
+    const htcPath = await tc.cacheDir(this.cacheDir, this.htcName, this.htcVersion, this.platform());
+    core.debug(`InstallCache.save cached to hosted tool cache ${htcPath}`);
+
+    if (cache.isFeatureAvailable()) {
+      core.debug(`InstallCache.save caching ${this.ghaCacheKey} to GitHub Actions cache`);
+      await cache.saveCache([this.cacheDir], this.ghaCacheKey);
+    }
+
+    return cachePath;
+  }
+
+  public async find(): Promise<string> {
+    let htcPath = tc.find(this.htcName, this.htcVersion, this.platform());
+    if (htcPath) {
+      core.info(`Restored from hosted tool cache ${htcPath}`);
+      return this.copyToCache(`${htcPath}/${this.cacheFile}`);
+    }
+
+    if (cache.isFeatureAvailable()) {
+      core.debug(`GitHub Actions cache feature available`);
+      if (await cache.restoreCache([this.cacheDir], this.ghaCacheKey)) {
+        core.info(`Restored ${this.ghaCacheKey} from GitHub Actions cache`);
+        htcPath = await tc.cacheDir(this.cacheDir, this.htcName, this.htcVersion, this.platform());
+        core.info(`Restored to hosted tool cache ${htcPath}`);
+        return this.copyToCache(`${htcPath}/${this.cacheFile}`);
+      }
+    } else {
+      core.info(`GitHub Actions cache feature not available`);
+    }
+
+    return '';
+  }
+
+  private copyToCache(file: string): string {
+    core.debug(`Copying ${file} to ${this.cachePath}`);
+    fs.copyFileSync(file, this.cachePath);
+    fs.chmodSync(this.cachePath, '0755');
+    return this.cachePath;
+  }
+
+  private platform(): string {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const arm_version = (process.config.variables as any).arm_version;
+    return `${os.platform()}-${os.arch()}${arm_version ? 'v' + arm_version : ''}`;
+  }
+}
--- a/src/context.ts
+++ b/src/context.ts
@@ -23,29 +23,37 @@ import * as github from '@actions/github';
 import {GitHub} from './github';

 export class Context {
-  public gitRef: string;
-  public buildGitContext: string;
-  public provenanceBuilderID: string;
+  private static readonly _tmpDir = fs.mkdtempSync(path.join(Context.ensureDirExists(process.env.RUNNER_TEMP || os.tmpdir()), 'docker-actions-toolkit-'));

-  private readonly _tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'docker-actions-toolkit-')).split(path.sep).join(path.posix.sep);
-
-  constructor() {
-    this.gitRef = github.context.ref;
-    if (github.context.sha && this.gitRef && !this.gitRef.startsWith('refs/')) {
-      this.gitRef = `refs/heads/${github.context.ref}`;
-    }
-    if (github.context.sha && !this.gitRef.startsWith(`refs/pull/`)) {
-      this.gitRef = github.context.sha;
-    }
-    this.buildGitContext = `${GitHub.serverURL}/${github.context.repo.owner}/${github.context.repo.repo}.git#${this.gitRef}`;
-    this.provenanceBuilderID = `${GitHub.serverURL}/${github.context.repo.owner}/${github.context.repo.repo}/actions/runs/${github.context.runId}`;
+  private static ensureDirExists(dir: string): string {
+    fs.mkdirSync(dir, {recursive: true});
+    return dir;
  }

-  public tmpDir(): string {
-    return this._tmpDir;
+  public static tmpDir(): string {
+    return Context._tmpDir;
  }

-  public tmpName(options?: tmp.TmpNameOptions): string {
+  public static tmpName(options?: tmp.TmpNameOptions): string {
    return tmp.tmpNameSync(options);
  }
+
+  public static gitRef(): string {
+    let gitRef = github.context.ref;
+    if (github.context.sha && gitRef && !gitRef.startsWith('refs/')) {
+      gitRef = `refs/heads/${github.context.ref}`;
+    }
+    if (github.context.sha && !gitRef.startsWith(`refs/pull/`)) {
+      gitRef = github.context.sha;
+    }
+    return gitRef;
+  }
+
+  public static gitContext(): string {
+    return `${GitHub.serverURL}/${github.context.repo.owner}/${github.context.repo.repo}.git#${Context.gitRef()}`;
+  }
+
+  public static provenanceBuilderID(): string {
+    return `${GitHub.serverURL}/${github.context.repo.owner}/${github.context.repo.repo}/actions/runs/${github.context.runId}`;
+  }
 }
--- a/src/docker.ts
+++ b/src/docker.ts
@@ -1,60 +0,0 @@
-/**
- * Copyright 2023 actions-toolkit authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import * as exec from '@actions/exec';
-
-export class Docker {
-  public static isAvailable(): boolean {
-    let dockerAvailable = false;
-    exec
-      .getExecOutput('docker', undefined, {
-        ignoreReturnCode: true,
-        silent: true
-      })
-      .then(res => {
-        if (res.stderr.length > 0 && res.exitCode != 0) {
-          dockerAvailable = false;
-        } else {
-          dockerAvailable = res.exitCode == 0;
-        }
-      })
-      // eslint-disable-next-line @typescript-eslint/no-unused-vars
-      .catch(error => {
-        dockerAvailable = false;
-      });
-    return dockerAvailable;
-  }
-
-  public static async printVersion(standalone?: boolean) {
-    const noDocker = standalone ?? !Docker.isAvailable();
-    if (noDocker) {
-      return;
-    }
-    await exec.exec('docker', ['version'], {
-      failOnStdErr: false
-    });
-  }
-
-  public static async printInfo(standalone?: boolean) {
-    const noDocker = standalone ?? !Docker.isAvailable();
-    if (noDocker) {
-      return;
-    }
-    await exec.exec('docker', ['info'], {
-      failOnStdErr: false
-    });
-  }
-}
--- a/src/docker/assets.ts
+++ b/src/docker/assets.ts
@@ -0,0 +1,249 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'fs';
+import {Context} from '../context';
+
+export const setupDockerWinPs1 = (): string => {
+  return get('docker-setup-win.ps1', setupDockerWinPs1Data);
+};
+
+export const dockerServiceLogsPs1 = (): string => {
+  return get('docker-service-logs.ps1', dockerServiceLogsPs1Data);
+};
+
+export const limaYaml = (): string => {
+  return get('lima.yaml', limaYamlData);
+};
+
+const get = (filename: string, data: string, mode?: string): string => {
+  const assetPath = Context.tmpName({
+    template: `docker-asset-XXXXXX-${filename}`,
+    tmpdir: Context.tmpDir()
+  });
+  fs.writeFileSync(assetPath, data);
+  if (mode) {
+    fs.chmodSync(assetPath, mode);
+  }
+  return assetPath;
+};
+
+export const setupDockerWinPs1Data = `
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory = $true)]
+    [string]$ToolDir,
+
+    [Parameter(Mandatory = $true)]
+    [string]$RunDir,
+
+    [Parameter(Mandatory = $true)]
+    [string]$DockerHost,
+
+    [Parameter(Mandatory = $false)]
+    [string]$DaemonConfig)
+
+$pwver = (Get-ItemProperty -Path HKLM:\\SOFTWARE\\Microsoft\\PowerShell\\3\\PowerShellEngine -Name 'PowerShellVersion').PowerShellVersion
+Write-Host "PowerShell version: $pwver"
+
+# Create run directory
+New-Item -ItemType Directory "$RunDir" -ErrorAction SilentlyContinue | Out-Null
+
+# Remove existing service
+if (Get-Service docker -ErrorAction SilentlyContinue) {
+  $dockerVersion = (docker version -f "{{.Server.Version}}")
+  Write-Host "Current installed Docker version: $dockerVersion"
+  # stop service
+  Stop-Service -Force -Name docker
+  Write-Host "Service stopped"
+  # remove service
+  sc.exe delete "docker"
+  # removes event log entry. we could use "Remove-EventLog -LogName -Source docker"
+  # but this cmd is not available atm
+  $ErrorActionPreference = "SilentlyContinue"
+  & reg delete "HKLM\\SYSTEM\\CurrentControlSet\\Services\\EventLog\\Application\\docker" /f 2>&1 | Out-Null
+  $ErrorActionPreference = "Stop"
+  Write-Host "Service removed"
+}
+
+$env:DOCKER_HOST = $DockerHost
+Write-Host "DOCKER_HOST: $env:DOCKER_HOST"
+
+if ($DaemonConfig) {
+  Write-Host "Writing Docker daemon config"
+  New-Item -ItemType Directory -Force -Path "$env:ProgramData\\Docker\\config"
+  $DaemonConfig | Out-File -FilePath "$env:ProgramData\\Docker\\config\\daemon.json"
+}
+
+Write-Host "Creating service"
+New-Item -ItemType Directory "$RunDir\\moby-root" -ErrorAction SilentlyContinue | Out-Null
+New-Item -ItemType Directory "$RunDir\\moby-exec" -ErrorAction SilentlyContinue | Out-Null
+Start-Process -Wait -NoNewWindow "$ToolDir\\dockerd" \`
+  -ArgumentList \`
+    "--host=$DockerHost", \`
+    "--data-root=$RunDir\\moby-root", \`
+    "--exec-root=$RunDir\\moby-exec", \`
+    "--pidfile=$RunDir\\docker.pid", \`
+    "--register-service"
+Write-Host "Starting service"
+Start-Service -Name docker
+Write-Host "Service started successfully!"
+
+$tries=20
+Write-Host "Waiting for Docker daemon to start..."
+While ($true) {
+  $ErrorActionPreference = "SilentlyContinue"
+  & "$ToolDir\\docker" version | Out-Null
+  $ErrorActionPreference = "Stop"
+  If ($LastExitCode -eq 0) {
+    break
+  }
+  $tries--
+  If ($tries -le 0) {
+    Throw "Failed to get a response from Docker daemon"
+  }
+  Write-Host -NoNewline "."
+  Start-Sleep -Seconds 1
+}
+Write-Host "Docker daemon started successfully!"
+`;
+
+export const dockerServiceLogsPs1Data = `
+Get-WinEvent -ea SilentlyContinue \`
+  -FilterHashtable @{ProviderName= "docker"; LogName = "application"} |
+    Sort-Object @{Expression="TimeCreated";Descending=$false} |
+    ForEach-Object {"$($_.TimeCreated.ToUniversalTime().ToString("o")) [$($_.LevelDisplayName)] $($_.Message)"}
+`;
+
+export const limaYamlData = `
+# VM type: "qemu" or "vz" (on macOS 13 and later).
+# The vmType can be specified only on creating the instance.
+# The vmType of existing instances cannot be changed.
+# Builtin default: "qemu"
+vmType: qemu
+
+# OS: "Linux".
+# Builtin default: "Linux"
+os: null
+
+# Arch: "default", "x86_64", "aarch64".
+# Builtin default: "default" (corresponds to the host architecture)
+arch: null
+
+images:
+- location: "https://cloud-images.ubuntu.com/releases/22.04/release-20231026/ubuntu-22.04-server-cloudimg-amd64.img"
+  arch: "x86_64"
+  digest: "sha256:054db2d88c454bb0ad8dfd8883955e3946b57d2b0bf0d023f3ade3c93cdd14e5"
+- location: "https://cloud-images.ubuntu.com/releases/22.04/release-20231026/ubuntu-22.04-server-cloudimg-arm64.img"
+  arch: "aarch64"
+  digest: "sha256:eafa7742ce5ff109222ea313d31ea366d587b4e89b900b11d8285ae775dfe8c3"
+
+# CPUs
+# Builtin default: min(4, host CPU cores)
+cpus: null
+
+# Memory size
+# Builtin default: min("4GiB", half of host memory)
+memory: null
+
+# Disk size
+# Builtin default: "100GiB"
+disk: 60GiB
+
+# Expose host directories to the guest, the mount point might be accessible from all UIDs in the guest
+# Builtin default: null (Mount nothing)
+# This file: Mount the home as read-only, /tmp/lima as writable
+mounts:
+- location: "~"
+- location: "/tmp/lima"
+  writable: true
+
+# Mount type for above mounts, such as "reverse-sshfs" (from sshocker), "9p" (EXPERIMENTAL, from QEMU’s virtio-9p-pci, aka virtfs),
+# or "virtiofs" (EXPERIMENTAL, needs \`vmType: vz\`)
+# Builtin default: "reverse-sshfs" (for QEMU), "virtiofs" (for vz)
+mountType: null
+
+containerd:
+  system: false
+  user: false
+
+provision:
+- mode: system
+  # This script defines the host.docker.internal hostname when hostResolver is disabled.
+  # It is also needed for lima 0.8.2 and earlier, which does not support hostResolver.hosts.
+  # Names defined in /etc/hosts inside the VM are not resolved inside containers when
+  # using the hostResolver; use hostResolver.hosts instead (requires lima 0.8.3 or later).
+  script: |
+    #!/bin/sh
+    sed -i 's/host.lima.internal.*/host.lima.internal host.docker.internal/' /etc/hosts
+- mode: system
+  script: |
+    #!/bin/sh
+    apt-get install -f -y iptables
+- mode: system
+  script: |
+    #!/bin/bash
+    set -eux -o pipefail
+    command -v docker >/dev/null 2>&1 && exit 0
+    if [ ! -e /etc/systemd/system/docker.socket.d/override.conf ]; then
+      mkdir -p /etc/systemd/system/docker.socket.d
+      # Alternatively we could just add the user to the "docker" group, but that requires restarting the user session
+      cat <<-EOF >/etc/systemd/system/docker.socket.d/override.conf
+      [Socket]
+      SocketUser=\${LIMA_CIDATA_USER}
+    EOF
+    fi
+    if [ ! -e /etc/docker/daemon.json ]; then
+      mkdir -p /etc/docker
+      cat <<-EOF >/etc/docker/daemon.json
+      {{stringify daemonConfig}}
+    EOF
+    fi
+    export DEBIAN_FRONTEND=noninteractive
+    curl -fsSL https://get.docker.com | sh -s -- --channel {{dockerBinChannel}} --version {{dockerBinVersion}}
+
+probes:
+- script: |
+    #!/bin/bash
+    set -eux -o pipefail
+    if ! timeout 30s bash -c "until command -v docker >/dev/null 2>&1; do sleep 3; done"; then
+      echo >&2 "docker is not installed yet"
+      exit 1
+    fi
+    if ! timeout 30s bash -c "until pgrep dockerd; do sleep 3; done"; then
+      echo >&2 "dockerd is not running"
+      exit 1
+    fi
+  hint: See "/var/log/cloud-init-output.log". in the guest
+
+hostResolver:
+  # hostResolver.hosts requires lima 0.8.3 or later. Names defined here will also
+  # resolve inside containers, and not just inside the VM itself.
+  hosts:
+    host.docker.internal: host.lima.internal
+
+portForwards:
+- guestSocket: "/var/run/docker.sock"
+  hostSocket: "{{dockerSock}}"
+
+audio:
+  # EXPERIMENTAL
+  # QEMU audiodev, e.g., "none", "coreaudio", "pa", "alsa", "oss".
+  # VZ driver, use "vz" as device name
+  # Choosing "none" will mute the audio output, and not play any sound.
+  # Builtin default: ""
+  device: none
+`;
--- a/src/docker/docker.ts
+++ b/src/docker/docker.ts
@@ -0,0 +1,76 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import * as core from '@actions/core';
+import * as io from '@actions/io';
+
+import {Exec} from '../exec';
+
+import {ConfigFile} from '../types/docker';
+
+export class Docker {
+  static get configDir(): string {
+    return process.env.DOCKER_CONFIG || path.join(os.homedir(), '.docker');
+  }
+
+  public static configFile(): ConfigFile | undefined {
+    const f = path.join(Docker.configDir, 'config.json');
+    if (!fs.existsSync(f)) {
+      return undefined;
+    }
+    return <ConfigFile>JSON.parse(fs.readFileSync(f, {encoding: 'utf-8'}));
+  }
+
+  public static async isAvailable(): Promise<boolean> {
+    return await io
+      .which('docker', true)
+      .then(res => {
+        core.debug(`Docker.isAvailable ok: ${res}`);
+        return true;
+      })
+      .catch(error => {
+        core.debug(`Docker.isAvailable error: ${error}`);
+        return false;
+      });
+  }
+
+  public static async context(name?: string): Promise<string> {
+    const args = ['context', 'inspect', '--format', '{{.Name}}'];
+    if (name) {
+      args.push(name);
+    }
+    return await Exec.getExecOutput(`docker`, args, {
+      ignoreReturnCode: true,
+      silent: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(res.stderr);
+      }
+      return res.stdout.trim();
+    });
+  }
+
+  public static async printVersion(): Promise<void> {
+    await Exec.exec('docker', ['version']);
+  }
+
+  public static async printInfo(): Promise<void> {
+    await Exec.exec('docker', ['info']);
+  }
+}
--- a/src/docker/install.ts
+++ b/src/docker/install.ts
@@ -0,0 +1,510 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import * as child_process from 'child_process';
+import fs from 'fs';
+import fsp from 'fs/promises';
+import os from 'os';
+import path from 'path';
+import retry from 'async-retry';
+import * as handlebars from 'handlebars';
+import * as util from 'util';
+import * as core from '@actions/core';
+import * as httpm from '@actions/http-client';
+import * as io from '@actions/io';
+import * as tc from '@actions/tool-cache';
+
+import {Context} from '../context';
+import {Exec} from '../exec';
+import {Util} from '../util';
+import {limaYamlData, dockerServiceLogsPs1, setupDockerWinPs1} from './assets';
+import {GitHubRelease} from '../types/github';
+
+export interface InstallOpts {
+  version?: string;
+  channel?: string;
+  runDir: string;
+  contextName?: string;
+  daemonConfig?: string;
+}
+
+export class Install {
+  private readonly runDir: string;
+  private readonly version: string;
+  private readonly channel: string;
+  private readonly contextName: string;
+  private readonly daemonConfig?: string;
+  private _version: string | undefined;
+  private _toolDir: string | undefined;
+
+  private readonly limaInstanceName = 'docker-actions-toolkit';
+
+  constructor(opts: InstallOpts) {
+    this.runDir = opts.runDir;
+    this.version = opts.version || 'latest';
+    this.channel = opts.channel || 'stable';
+    this.contextName = opts.contextName || 'setup-docker-action';
+    this.daemonConfig = opts.daemonConfig;
+  }
+
+  get toolDir(): string {
+    return this._toolDir || Context.tmpDir();
+  }
+
+  public async download(): Promise<string> {
+    const release: GitHubRelease = await Install.getRelease(this.version);
+    this._version = release.tag_name.replace(/^v+|v+$/g, '');
+    core.debug(`docker.Install.download version: ${this._version}`);
+
+    const downloadURL = this.downloadURL(this._version, this.channel);
+    core.info(`Downloading ${downloadURL}`);
+
+    const downloadPath = await tc.downloadTool(downloadURL);
+    core.debug(`docker.Install.download downloadPath: ${downloadPath}`);
+
+    let extractFolder: string;
+    if (os.platform() == 'win32') {
+      extractFolder = await tc.extractZip(downloadPath);
+    } else {
+      extractFolder = await tc.extractTar(downloadPath);
+    }
+    if (Util.isDirectory(path.join(extractFolder, 'docker'))) {
+      extractFolder = path.join(extractFolder, 'docker');
+    }
+    core.debug(`docker.Install.download extractFolder: ${extractFolder}`);
+
+    core.info('Fixing perms');
+    fs.readdir(path.join(extractFolder), function (err, files) {
+      if (err) {
+        throw err;
+      }
+      // eslint-disable-next-line @typescript-eslint/no-unused-vars
+      files.forEach(function (file, index) {
+        fs.chmodSync(path.join(extractFolder, file), '0755');
+      });
+    });
+
+    const tooldir = await tc.cacheDir(extractFolder, `docker-${this.channel}`, this._version.replace(/(0+)([1-9]+)/, '$2'));
+    core.addPath(tooldir);
+    core.info('Added Docker to PATH');
+
+    this._toolDir = tooldir;
+    return tooldir;
+  }
+
+  public async install(): Promise<void> {
+    if (!this.toolDir) {
+      throw new Error('toolDir must be set. Run download first.');
+    }
+    if (!this.runDir) {
+      throw new Error('runDir must be set');
+    }
+    switch (os.platform()) {
+      case 'darwin': {
+        await this.installDarwin();
+        break;
+      }
+      case 'linux': {
+        await this.installLinux();
+        break;
+      }
+      case 'win32': {
+        await this.installWindows();
+        break;
+      }
+      default: {
+        throw new Error(`Unsupported platform: ${os.platform()}`);
+      }
+    }
+  }
+
+  private async installDarwin(): Promise<void> {
+    const limaDir = path.join(os.homedir(), '.lima', this.limaInstanceName);
+    await io.mkdirP(limaDir);
+    const dockerHost = `unix://${limaDir}/docker.sock`;
+
+    // avoid brew to upgrade unrelated packages.
+    let envs = Object.assign({}, process.env, {
+      HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK: '1'
+    }) as {
+      [key: string]: string;
+    };
+
+    if (!(await Install.limaInstalled())) {
+      await core.group('Installing lima', async () => {
+        await Exec.exec('brew', ['install', 'lima'], {env: envs});
+      });
+    }
+
+    await core.group('Creating lima config', async () => {
+      let limaDaemonConfig = {};
+      if (this.daemonConfig) {
+        limaDaemonConfig = JSON.parse(this.daemonConfig);
+      }
+      handlebars.registerHelper('stringify', function (obj) {
+        return new handlebars.SafeString(JSON.stringify(obj));
+      });
+      const limaCfg = handlebars.compile(limaYamlData)({
+        daemonConfig: limaDaemonConfig,
+        dockerSock: `${limaDir}/docker.sock`,
+        dockerBinVersion: this._version,
+        dockerBinChannel: this.channel
+      });
+      core.info(`Writing lima config to ${path.join(limaDir, 'lima.yaml')}`);
+      fs.writeFileSync(path.join(limaDir, 'lima.yaml'), limaCfg);
+      core.info(limaCfg);
+    });
+
+    const qemuArch = await Install.qemuArch();
+    await core.group('QEMU version', async () => {
+      await Exec.exec(`qemu-system-${qemuArch} --version`);
+    });
+
+    // lima might already be started on the runner so env var added in download
+    // method is not expanded to the running process.
+    envs = Object.assign({}, envs, {
+      PATH: `${this.toolDir}:${process.env.PATH}`
+    }) as {
+      [key: string]: string;
+    };
+
+    await core.group('Starting lima instance', async () => {
+      const limaStartArgs = ['start', `--name=${this.limaInstanceName}`, '--tty=false'];
+      if (process.env.LIMA_START_ARGS) {
+        limaStartArgs.push(process.env.LIMA_START_ARGS);
+      }
+      try {
+        await Exec.exec(`limactl ${limaStartArgs.join(' ')}`, [], {env: envs});
+      } catch (e) {
+        fsp
+          .readdir(limaDir)
+          .then(files => {
+            files
+              .filter(f => path.extname(f) === '.log')
+              .forEach(f => {
+                const logfile = path.join(limaDir, f);
+                const logcontent = fs.readFileSync(logfile, {encoding: 'utf8'}).trim();
+                if (logcontent.length > 0) {
+                  core.info(`### ${logfile}:\n${logcontent}`);
+                }
+              });
+          })
+          .catch(() => {
+            // ignore
+          });
+        throw e;
+      }
+    });
+
+    await core.group('Create Docker context', async () => {
+      await Exec.exec('docker', ['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
+      await Exec.exec('docker', ['context', 'use', this.contextName]);
+    });
+  }
+
+  private async installLinux(): Promise<void> {
+    const dockerHost = `unix://${path.join(this.runDir, 'docker.sock')}`;
+    await io.mkdirP(this.runDir);
+
+    const daemonConfigPath = path.join(this.runDir, 'daemon.json');
+    await fs.writeFileSync(daemonConfigPath, '{}');
+
+    let daemonConfig = undefined;
+    const daemonConfigDefaultPath = '/etc/docker/daemon.json';
+    if (fs.existsSync(daemonConfigDefaultPath)) {
+      await core.group('Default Docker daemon config found', async () => {
+        core.info(JSON.stringify(JSON.parse(fs.readFileSync(daemonConfigDefaultPath, {encoding: 'utf8'})), null, 2));
+      });
+      daemonConfig = JSON.parse(fs.readFileSync(daemonConfigDefaultPath, {encoding: 'utf8'}));
+    }
+    if (this.daemonConfig) {
+      daemonConfig = Object.assign(daemonConfig || {}, JSON.parse(this.daemonConfig));
+    }
+
+    if (daemonConfig) {
+      const daemonConfigStr = JSON.stringify(daemonConfig, null, 2);
+      await core.group('Writing Docker daemon config', async () => {
+        fs.writeFileSync(daemonConfigPath, daemonConfigStr);
+        core.info(daemonConfigStr);
+      });
+    }
+
+    await core.group('Start Docker daemon', async () => {
+      const bashPath: string = await io.which('bash', true);
+      const cmd = `${this.toolDir}/dockerd --host="${dockerHost}" --config-file="${daemonConfigPath}" --exec-root="${this.runDir}/execroot" --data-root="${this.runDir}/data" --pidfile="${this.runDir}/docker.pid" --userland-proxy=false`;
+      core.info(`[command] ${cmd}`); // https://github.com/actions/toolkit/blob/3d652d3133965f63309e4b2e1c8852cdbdcb3833/packages/exec/src/toolrunner.ts#L47
+      const proc = await child_process.spawn(
+        // We can't use Exec.exec here because we need to detach the process to
+        // avoid killing it when the action finishes running. Even if detached,
+        // we also need to run dockerd in a subshell and unref the process so
+        // GitHub Action doesn't wait for it to finish.
+        `sudo -E ${bashPath} << EOF
+( ${cmd} 2>&1 | tee "${this.runDir}/dockerd.log" ) &
+EOF`,
+        [],
+        {
+          detached: true,
+          shell: true,
+          stdio: ['ignore', process.stdout, process.stderr]
+        }
+      );
+      proc.unref();
+      await Util.sleep(3);
+      const retries = 10;
+      await retry(
+        async bail => {
+          try {
+            await Exec.getExecOutput(`docker version`, undefined, {
+              silent: true,
+              env: Object.assign({}, process.env, {
+                DOCKER_HOST: dockerHost
+              }) as {
+                [key: string]: string;
+              }
+            });
+          } catch (e) {
+            bail(e);
+          }
+        },
+        {
+          retries: retries,
+          minTimeout: 1000,
+          onRetry: (err, i) => {
+            core.info(`${err}. Retrying (${i}/${retries})...`);
+          }
+        }
+      );
+      core.info(`Docker daemon started started successfully`);
+    });
+
+    await core.group('Create Docker context', async () => {
+      await Exec.exec('docker', ['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
+      await Exec.exec('docker', ['context', 'use', this.contextName]);
+    });
+  }
+
+  private async installWindows(): Promise<void> {
+    const dockerHost = 'npipe:////./pipe/setup_docker_action';
+
+    let daemonConfig = undefined;
+    const daemonConfigPath = path.join(this.runDir, 'daemon.json');
+    if (fs.existsSync(daemonConfigPath)) {
+      await core.group('Default Docker daemon config found', async () => {
+        core.info(JSON.stringify(JSON.parse(fs.readFileSync(daemonConfigPath, {encoding: 'utf8'})), null, 2));
+      });
+      daemonConfig = JSON.parse(fs.readFileSync(daemonConfigPath, {encoding: 'utf8'}));
+    }
+    if (this.daemonConfig) {
+      daemonConfig = Object.assign(daemonConfig || {}, JSON.parse(this.daemonConfig));
+    }
+
+    let daemonConfigStr = '{}';
+    if (daemonConfig) {
+      daemonConfigStr = JSON.stringify(daemonConfig, null, 2);
+      await core.group('Docker daemon config', async () => {
+        core.info(daemonConfigStr);
+      });
+    }
+
+    await core.group('Install Docker daemon service', async () => {
+      const setupCmd = await Util.powershellCommand(setupDockerWinPs1(), {
+        ToolDir: this.toolDir,
+        RunDir: this.runDir,
+        DockerHost: dockerHost,
+        DaemonConfig: daemonConfigStr
+      });
+      await Exec.exec(setupCmd.command, setupCmd.args);
+      const logCmd = await Util.powershellCommand(dockerServiceLogsPs1());
+      await Exec.exec(logCmd.command, logCmd.args);
+    });
+
+    await core.group('Create Docker context', async () => {
+      await Exec.exec('docker', ['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
+      await Exec.exec('docker', ['context', 'use', this.contextName]);
+    });
+  }
+
+  public async tearDown(): Promise<void> {
+    if (!this.runDir) {
+      throw new Error('runDir must be set');
+    }
+    switch (os.platform()) {
+      case 'darwin': {
+        await this.tearDownDarwin();
+        break;
+      }
+      case 'linux': {
+        await this.tearDownLinux();
+        break;
+      }
+      case 'win32': {
+        await this.tearDownWindows();
+        break;
+      }
+      default: {
+        throw new Error(`Unsupported platform: ${os.platform()}`);
+      }
+    }
+  }
+
+  private async tearDownDarwin(): Promise<void> {
+    await core.group('Docker daemon logs', async () => {
+      await Exec.exec('limactl', ['shell', '--tty=false', this.limaInstanceName, 'sudo', 'journalctl', '-u', 'docker.service', '-l', '--no-pager']).catch(() => {
+        core.warning(`Failed to get Docker daemon logs`);
+      });
+    });
+    await core.group('Stopping lima instance', async () => {
+      await Exec.exec('limactl', ['stop', '--tty=false', this.limaInstanceName, '--force']);
+    });
+    await core.group('Removing lima instance', async () => {
+      await Exec.exec('limactl', ['delete', '--tty=false', this.limaInstanceName, '--force']);
+    });
+    await core.group('Removing Docker context', async () => {
+      await Exec.exec('docker', ['context', 'rm', '-f', this.contextName]);
+    });
+    await core.group(`Cleaning up runDir`, async () => {
+      await Exec.exec('sudo', ['rm', '-rf', this.runDir]);
+    });
+  }
+
+  private async tearDownLinux(): Promise<void> {
+    await core.group('Docker daemon logs', async () => {
+      core.info(fs.readFileSync(path.join(this.runDir, 'dockerd.log'), {encoding: 'utf8'}));
+    });
+    await core.group('Stopping Docker daemon', async () => {
+      await Exec.exec('sudo', ['kill', '-s', 'SIGTERM', fs.readFileSync(path.join(this.runDir, 'docker.pid')).toString().trim()]);
+      await Util.sleep(5);
+    });
+    await core.group('Removing Docker context', async () => {
+      await Exec.exec('docker', ['context', 'rm', '-f', this.contextName]);
+    });
+    await core.group(`Cleaning up runDir`, async () => {
+      await Exec.exec('sudo', ['rm', '-rf', this.runDir], {
+        ignoreReturnCode: true,
+        failOnStdErr: false
+      });
+    });
+  }
+
+  private async tearDownWindows(): Promise<void> {
+    await core.group('Docker daemon logs', async () => {
+      const logCmd = await Util.powershellCommand(dockerServiceLogsPs1());
+      await Exec.exec(logCmd.command, logCmd.args);
+    });
+    await core.group('Removing Docker context', async () => {
+      await Exec.exec('docker', ['context', 'rm', '-f', this.contextName]);
+    });
+  }
+
+  private downloadURL(version: string, channel: string): string {
+    const platformOS = Install.platformOS();
+    const platformArch = Install.platformArch();
+    const ext = platformOS === 'win' ? '.zip' : '.tgz';
+    return util.format('https://download.docker.com/%s/static/%s/%s/docker-%s%s', platformOS, channel, platformArch, version, ext);
+  }
+
+  private static platformOS(): string {
+    switch (os.platform()) {
+      case 'darwin': {
+        return 'mac';
+      }
+      case 'linux': {
+        return 'linux';
+      }
+      case 'win32': {
+        return 'win';
+      }
+      default: {
+        return os.platform();
+      }
+    }
+  }
+
+  private static platformArch(): string {
+    switch (os.arch()) {
+      case 'x64': {
+        return 'x86_64';
+      }
+      case 'ppc64': {
+        return 'ppc64le';
+      }
+      case 'arm64': {
+        return 'aarch64';
+      }
+      case 'arm': {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const arm_version = (process.config.variables as any).arm_version;
+        switch (arm_version) {
+          case 6: {
+            return 'armel';
+          }
+          case 7: {
+            return 'armhf';
+          }
+          default: {
+            return `v${arm_version}`;
+          }
+        }
+      }
+      default: {
+        return os.arch();
+      }
+    }
+  }
+
+  private static async limaInstalled(): Promise<boolean> {
+    return await io
+      .which('lima', true)
+      .then(res => {
+        core.debug(`docker.Install.limaAvailable ok: ${res}`);
+        return true;
+      })
+      .catch(error => {
+        core.debug(`docker.Install.limaAvailable error: ${error}`);
+        return false;
+      });
+  }
+
+  private static async qemuArch(): Promise<string> {
+    switch (os.arch()) {
+      case 'x64': {
+        return 'x86_64';
+      }
+      case 'arm64': {
+        return 'aarch64';
+      }
+      default: {
+        return os.arch();
+      }
+    }
+  }
+
+  public static async getRelease(version: string): Promise<GitHubRelease> {
+    const url = `https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/docker-releases.json`;
+    const http: httpm.HttpClient = new httpm.HttpClient('docker-actions-toolkit');
+    const resp: httpm.HttpClientResponse = await http.get(url);
+    const body = await resp.readBody();
+    const statusCode = resp.message.statusCode || 500;
+    if (statusCode >= 400) {
+      throw new Error(`Failed to get Docker release ${version} from ${url} with status code ${statusCode}: ${body}`);
+    }
+    const releases = <Record<string, GitHubRelease>>JSON.parse(body);
+    if (!releases[version]) {
+      throw new Error(`Cannot find Docker release ${version} in ${url}`);
+    }
+    return releases[version];
+  }
+}
--- a/src/dockerhub.ts
+++ b/src/dockerhub.ts
@@ -0,0 +1,127 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import * as core from '@actions/core';
+import * as httpm from '@actions/http-client';
+import {HttpCodes} from '@actions/http-client';
+
+import {RepositoryRequest, RepositoryResponse, RepositoryTagsRequest, RepositoryTagsResponse, TokenRequest, TokenResponse, UpdateRepoDescriptionRequest} from './types/dockerhub';
+
+export interface DockerHubOpts {
+  credentials: TokenRequest;
+}
+
+const apiBaseURL = 'https://hub.docker.com';
+const loginURL = `${apiBaseURL}/v2/users/login?refresh_token=true`;
+const repositoriesURL = `${apiBaseURL}/v2/repositories/`;
+
+export class DockerHub {
+  private readonly opts: DockerHubOpts;
+  private readonly httpc: httpm.HttpClient;
+
+  private constructor(opts: DockerHubOpts, httpc: httpm.HttpClient) {
+    this.opts = opts;
+    this.httpc = httpc;
+  }
+
+  public static async build(opts: DockerHubOpts): Promise<DockerHub> {
+    return new DockerHub(
+      opts,
+      new httpm.HttpClient('docker-actions-toolkit', [], {
+        headers: {
+          Authorization: `JWT ${await DockerHub.login(opts.credentials)}`,
+          'Content-Type': 'application/json'
+        }
+      })
+    );
+  }
+
+  public async getRepositoryTags(req: RepositoryTagsRequest): Promise<RepositoryTagsResponse> {
+    const url = new URL(`${repositoriesURL}${req.namespace}/${req.name}/tags`);
+    if (req.page) {
+      url.searchParams.append('page', req.page.toString());
+    }
+    if (req.page_size) {
+      url.searchParams.append('page_size', req.page_size.toString());
+    }
+    const resp: httpm.HttpClientResponse = await this.httpc.get(url.toString());
+    return <RepositoryTagsResponse>JSON.parse(await DockerHub.handleResponse(resp));
+  }
+
+  public async getRepositoryAllTags(req: RepositoryTagsRequest): Promise<RepositoryTagsResponse> {
+    const tags: RepositoryTagsResponse = await this.getRepositoryTags(req);
+    while (tags.next) {
+      const nextURL = new URL(tags.next);
+      const pageNumber = Number(nextURL.searchParams.get('page'));
+      const pageSize = Number(nextURL.searchParams.get('page_size')) || undefined;
+      const nextTags = await this.getRepositoryTags({
+        namespace: req.namespace,
+        name: req.name,
+        page: pageNumber,
+        page_size: pageSize || req.page_size
+      } as RepositoryTagsRequest);
+      tags.results.push(...nextTags.results);
+      tags.next = nextTags.next;
+    }
+    return tags;
+  }
+
+  public async getRepository(req: RepositoryRequest): Promise<RepositoryResponse> {
+    const resp: httpm.HttpClientResponse = await this.httpc.get(`${repositoriesURL}${req.namespace}/${req.name}`);
+    return <RepositoryResponse>JSON.parse(await DockerHub.handleResponse(resp));
+  }
+
+  public async updateRepoDescription(req: UpdateRepoDescriptionRequest): Promise<RepositoryResponse> {
+    const body = {
+      full_description: req.full_description
+    };
+    if (req.description) {
+      body['description'] = req.description;
+    }
+    const resp: httpm.HttpClientResponse = await this.httpc.patch(`${repositoriesURL}${req.namespace}/${req.name}`, JSON.stringify(body));
+    return <RepositoryResponse>JSON.parse(await DockerHub.handleResponse(resp));
+  }
+
+  private static async login(req: TokenRequest): Promise<string> {
+    const http: httpm.HttpClient = new httpm.HttpClient('docker-actions-toolkit', [], {
+      headers: {
+        'Content-Type': 'application/json'
+      }
+    });
+    const resp: httpm.HttpClientResponse = await http.post(loginURL, JSON.stringify(req));
+    const tokenResp = <TokenResponse>JSON.parse(await DockerHub.handleResponse(resp));
+    core.setSecret(`${tokenResp.token}`);
+    return `${tokenResp.token}`;
+  }
+
+  private static async handleResponse(resp: httpm.HttpClientResponse): Promise<string> {
+    const body = await resp.readBody();
+    resp.message.statusCode = resp.message.statusCode || HttpCodes.InternalServerError;
+    if (resp.message.statusCode < 200 || resp.message.statusCode >= 300) {
+      if (resp.message.statusCode == HttpCodes.Unauthorized) {
+        throw new Error(`Docker Hub API: operation not permitted`);
+      }
+      const errResp = <Record<string, string>>JSON.parse(body);
+      for (const k of ['message', 'detail', 'error']) {
+        if (errResp[k]) {
+          throw new Error(`Docker Hub API: bad status code ${resp.message.statusCode}: ${errResp[k]}`);
+        }
+      }
+      throw new Error(`Docker Hub API: bad status code ${resp.message.statusCode}`);
+    }
+    return body;
+  }
+}
--- a/src/exec.ts
+++ b/src/exec.ts
@@ -0,0 +1,31 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import * as core from '@actions/core';
+import * as exec from '@actions/exec';
+import {ExecOptions, ExecOutput} from '@actions/exec';
+
+export class Exec {
+  public static async exec(commandLine: string, args?: string[], options?: ExecOptions): Promise<number> {
+    core.debug(`Exec.exec: ${commandLine} ${args?.join(' ')}`);
+    return exec.exec(commandLine, args, options);
+  }
+
+  public static async getExecOutput(commandLine: string, args?: string[], options?: ExecOptions): Promise<ExecOutput> {
+    core.debug(`Exec.getExecOutput: ${commandLine} ${args?.join(' ')}`);
+    return exec.getExecOutput(commandLine, args, options);
+  }
+}
--- a/src/git.ts
+++ b/src/git.ts
@@ -14,24 +14,146 @@
 * limitations under the License.
 */

-import * as exec from '@actions/exec';
+import * as core from '@actions/core';
+import {Octokit} from '@octokit/core';
+import {restEndpointMethods} from '@octokit/plugin-rest-endpoint-methods';
+
+import {Exec} from './exec';
+import {GitHub} from './github';
+import {Context} from '@actions/github/lib/context';
+
+import {Context as GitContext} from './types/git';

 export class Git {
-  public static async getRemoteSha(repo: string, ref: string): Promise<string> {
-    return await exec
-      .getExecOutput(`git`, ['ls-remote', repo, ref], {
-        ignoreReturnCode: true,
-        silent: true
+  public static async context(): Promise<GitContext> {
+    const ctx = new Context();
+    ctx.ref = await Git.ref();
+    ctx.sha = await Git.fullCommit();
+    return ctx;
+  }
+
+  public static async isInsideWorkTree(): Promise<boolean> {
+    return await Git.exec(['rev-parse', '--is-inside-work-tree'])
+      .then(out => {
+        return out === 'true';
      })
-      .then(res => {
-        if (res.stderr.length > 0 && res.exitCode != 0) {
-          throw new Error(res.stderr);
-        }
-        const [rsha] = res.stdout.trim().split(/[\s\t]/);
-        if (rsha.length == 0) {
-          throw new Error(`Cannot find remote ref for ${repo}#${ref}`);
-        }
-        return rsha;
+      .catch(() => {
+        return false;
      });
  }
+
+  public static async remoteSha(repo: string, ref: string, token?: string): Promise<string> {
+    const repoMatch = repo.match(/github.com\/([^/]+)\/([^/]+?)(?:\.git)?(\/|$)/);
+    // if we have a token and this is a GitHub repo we can use the GitHub API
+    if (token && repoMatch) {
+      core.setSecret(token);
+      const octokit = new (Octokit.plugin(restEndpointMethods).defaults({
+        baseUrl: GitHub.apiURL
+      }))({auth: token});
+      const [owner, repoName] = repoMatch.slice(1, 3);
+      try {
+        return (
+          await octokit.rest.repos.listCommits({
+            owner: owner,
+            repo: repoName,
+            sha: ref,
+            per_page: 1
+          })
+        ).data[0].sha;
+      } catch (e) {
+        throw new Error(`Cannot find remote ref for ${repo}#${ref}: ${e.message}`);
+      }
+    }
+    // otherwise we fall back to git ls-remote
+    return await Git.exec(['ls-remote', repo, ref]).then(out => {
+      const [rsha] = out.split(/[\s\t]/);
+      if (rsha.length == 0) {
+        throw new Error(`Cannot find remote ref for ${repo}#${ref}`);
+      }
+      return rsha;
+    });
+  }
+
+  public static async remoteURL(): Promise<string> {
+    return await Git.exec(['remote', 'get-url', 'origin']).then(rurl => {
+      if (rurl.length == 0) {
+        return Git.exec(['remote', 'get-url', 'upstream']).then(rurl => {
+          if (rurl.length == 0) {
+            throw new Error(`Cannot find remote URL for origin or upstream`);
+          }
+          return rurl;
+        });
+      }
+      return rurl;
+    });
+  }
+
+  public static async ref(): Promise<string> {
+    const isHeadDetached = await Git.isHeadDetached();
+    if (isHeadDetached) {
+      return await Git.getDetachedRef();
+    }
+
+    return await Git.exec(['symbolic-ref', 'HEAD']);
+  }
+
+  public static async fullCommit(): Promise<string> {
+    return await Git.exec(['show', '--format=%H', 'HEAD', '--quiet', '--']);
+  }
+
+  public static async shortCommit(): Promise<string> {
+    return await Git.exec(['show', '--format=%h', 'HEAD', '--quiet', '--']);
+  }
+
+  public static async tag(): Promise<string> {
+    return await Git.exec(['tag', '--points-at', 'HEAD', '--sort', '-version:creatordate']).then(tags => {
+      if (tags.length == 0) {
+        return Git.exec(['describe', '--tags', '--abbrev=0']);
+      }
+      return tags.split('\n')[0];
+    });
+  }
+
+  private static async isHeadDetached(): Promise<boolean> {
+    return await Git.exec(['branch', '--show-current']).then(res => {
+      return res.length == 0;
+    });
+  }
+
+  private static async getDetachedRef(): Promise<string> {
+    const res = await Git.exec(['show', '-s', '--pretty=%D']);
+
+    const refMatch = res.match(/^HEAD, (.*)$/);
+
+    if (!refMatch) {
+      throw new Error(`Cannot find detached HEAD ref in "${res}"`);
+    }
+
+    const ref = refMatch[1].trim();
+
+    // Tag refs are formatted as "tag: <tagname>"
+    if (ref.startsWith('tag: ')) {
+      return `refs/tags/${ref.split(':')[1].trim()}`;
+    }
+
+    // Otherwise, it's a branch "<origin>/<branch-name>, <branch-name>"
+    const branchMatch = ref.match(/^[^/]+\/[^/]+, (.+)$/);
+    if (branchMatch) {
+      return `refs/heads/${branchMatch[1].trim()}`;
+    }
+
+    throw new Error(`Unsupported detached HEAD ref in "${res}"`);
+  }
+
+  private static async exec(args: string[] = []): Promise<string> {
+    return await Exec.getExecOutput(`git`, args, {
+      ignoreReturnCode: true,
+      silent: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(res.stderr);
+      }
+      return res.stdout.trim();
+    });
+  }
 }
--- a/src/github.ts
+++ b/src/github.ts
@@ -15,43 +15,75 @@
 */

 import {GitHub as Octokit} from '@actions/github/lib/utils';
+import * as core from '@actions/core';
 import * as github from '@actions/github';
-import {components as OctoOpenApiTypes} from '@octokit/openapi-types';
-import jwt_decode, {JwtPayload} from 'jwt-decode';
 import {Context} from '@actions/github/lib/context';
+import {jwtDecode, JwtPayload} from 'jwt-decode';

-export type GitHubRepo = OctoOpenApiTypes['schemas']['repository'];
-
-export interface GitHubActionsRuntimeToken extends JwtPayload {
-  ac?: string;
-}
+import {GitHubActionsRuntimeToken, GitHubActionsRuntimeTokenAC, GitHubRepo} from './types/github';

 export interface GitHubOpts {
  token?: string;
 }

 export class GitHub {
-  public static readonly serverURL: string = process.env.GITHUB_SERVER_URL || 'https://github.com';
  public readonly octokit: InstanceType<typeof Octokit>;

  constructor(opts?: GitHubOpts) {
    this.octokit = github.getOctokit(`${opts?.token}`);
  }

-  get context(): Context {
-    return github.context;
-  }
-
-  get serverURL(): string {
-    return process.env.GITHUB_SERVER_URL || 'https://github.com';
-  }
-
-  get actionsRuntimeToken(): GitHubActionsRuntimeToken {
-    const token = process.env['ACTIONS_RUNTIME_TOKEN'] || '';
-    return token ? jwt_decode<GitHubActionsRuntimeToken>(token) : {};
-  }
-
  public repoData(): Promise<GitHubRepo> {
    return this.octokit.rest.repos.get({...github.context.repo}).then(response => response.data as GitHubRepo);
  }
+
+  static get context(): Context {
+    return github.context;
+  }
+
+  static get serverURL(): string {
+    return process.env.GITHUB_SERVER_URL || 'https://github.com';
+  }
+
+  static get apiURL(): string {
+    return process.env.GITHUB_API_URL || 'https://api.github.com';
+  }
+
+  static get actionsRuntimeToken(): GitHubActionsRuntimeToken | undefined {
+    const token = process.env['ACTIONS_RUNTIME_TOKEN'] || '';
+    return token ? (jwtDecode<JwtPayload>(token) as GitHubActionsRuntimeToken) : undefined;
+  }
+
+  public static async printActionsRuntimeTokenACs() {
+    let jwt: GitHubActionsRuntimeToken | undefined;
+    try {
+      jwt = GitHub.actionsRuntimeToken;
+    } catch (e) {
+      throw new Error(`Cannot parse GitHub Actions Runtime Token: ${e.message}`);
+    }
+    if (!jwt) {
+      throw new Error(`ACTIONS_RUNTIME_TOKEN not set`);
+    }
+    try {
+      <Array<GitHubActionsRuntimeTokenAC>>JSON.parse(`${jwt.ac}`).forEach(ac => {
+        let permission: string;
+        switch (ac.Permission) {
+          case 1:
+            permission = 'read';
+            break;
+          case 2:
+            permission = 'write';
+            break;
+          case 3:
+            permission = 'read/write';
+            break;
+          default:
+            permission = `unimplemented (${ac.Permission})`;
+        }
+        core.info(`${ac.Scope}: ${permission}`);
+      });
+    } catch (e) {
+      throw new Error(`Cannot parse GitHub Actions Runtime Token ACs: ${e.message}`);
+    }
+  }
 }
--- a/src/index.ts
+++ b/src/index.ts
@@ -0,0 +1,42 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import * as core from '@actions/core';
+
+const isPost = !!process.env['STATE_isPost'];
+if (!isPost) {
+  core.saveState('isPost', 'true');
+}
+
+/**
+ * Runs a GitHub Action.
+ * Output will be streamed to the live console.
+ *
+ * @param     main            runs the defined function.
+ * @param     post            runs the defined function at the end of the job if set.
+ * @returns   Promise<void>
+ */
+export async function run(main: () => Promise<void>, post?: () => Promise<void>): Promise<void> {
+  if (!isPost) {
+    try {
+      await main();
+    } catch (e) {
+      core.setFailed(e.message);
+    }
+  } else if (post) {
+    await post();
+  }
+}
--- a/src/toolkit.ts
+++ b/src/toolkit.ts
@@ -14,20 +14,13 @@
 * limitations under the License.
 */

-import {Context} from './context';
-import {Buildx} from './buildx';
-import {BuildKit} from './buildkit';
+import {Buildx} from './buildx/buildx';
+import {Install as BuildxInstall} from './buildx/install';
+import {Bake} from './buildx/bake';
+import {Builder} from './buildx/builder';
+import {BuildKit} from './buildkit/buildkit';
 import {GitHub} from './github';

-export {Builder, BuilderOpts, BuilderInfo, NodeInfo} from './builder';
-export {BuildKit, BuildKitOpts} from './buildkit';
-export {Buildx, BuildxOpts} from './buildx';
-export {Context} from './context';
-export {Docker} from './docker';
-export {Git} from './git';
-export {GitHub, GitHubRepo, GitHubActionsRuntimeToken} from './github';
-export {Util} from './util';
-
 export interface ToolkitOpts {
  /**
   * GitHub token to use for authentication.
@@ -37,15 +30,19 @@ export interface ToolkitOpts {
 }

 export class Toolkit {
-  public context: Context;
  public github: GitHub;
  public buildx: Buildx;
+  public buildxInstall: BuildxInstall;
+  public bake: Bake;
+  public builder: Builder;
  public buildkit: BuildKit;

  constructor(opts: ToolkitOpts = {}) {
-    this.context = new Context();
    this.github = new GitHub({token: opts.githubToken});
-    this.buildx = new Buildx({context: this.context});
-    this.buildkit = new BuildKit({context: this.context, buildx: this.buildx});
+    this.buildx = new Buildx();
+    this.buildxInstall = new BuildxInstall();
+    this.bake = new Bake({buildx: this.buildx});
+    this.builder = new Builder({buildx: this.buildx});
+    this.buildkit = new BuildKit({buildx: this.buildx});
  }
 }
--- a/src/types/bake.ts
+++ b/src/types/bake.ts
@@ -0,0 +1,45 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export interface BakeDefinition {
+  group: Record<string, Group>;
+  target: Record<string, Target>;
+}
+
+export interface Group {
+  targets: Array<string>;
+}
+
+export interface Target {
+  args?: Record<string, string>;
+  attest?: Array<string>;
+  'cache-from'?: Array<string>;
+  'cache-to'?: Array<string>;
+  context: string;
+  contexts?: Record<string, string>;
+  dockerfile: string;
+  'dockerfile-inline'?: string;
+  labels?: Record<string, string>;
+  'no-cache'?: boolean;
+  'no-cache-filter'?: Array<string>;
+  output?: Array<string>;
+  platforms?: Array<string>;
+  pull?: boolean;
+  secret?: Array<string>;
+  ssh?: Array<string>;
+  tags?: Array<string>;
+  target?: string;
+}
--- a/src/types/builder.ts
+++ b/src/types/builder.ts
@@ -0,0 +1,44 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export interface BuilderInfo {
+  name?: string;
+  driver?: string;
+  lastActivity?: Date;
+  nodes: NodeInfo[];
+}
+
+export interface Node {
+  name?: string;
+  endpoint?: string;
+  'driver-opts'?: Array<string>;
+  'buildkitd-flags'?: string;
+  platforms?: string;
+}
+
+export interface NodeInfo extends Node {
+  status?: string;
+  buildkit?: string;
+  labels?: Record<string, string>;
+  gcPolicy?: Array<GCPolicy>;
+}
+
+export interface GCPolicy {
+  all?: boolean;
+  filter?: string[];
+  keepDuration?: string;
+  keepBytes?: string;
+}
--- a/src/types/buildx.ts
+++ b/src/types/buildx.ts
@@ -0,0 +1,28 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export interface Cert {
+  cacert?: string;
+  cert?: string;
+  key?: string;
+}
+
+export interface DownloadVersion {
+  key: string;
+  version: string;
+  downloadURL: string;
+  releasesURL: string;
+}
--- a/src/types/docker.ts
+++ b/src/types/docker.ts
@@ -0,0 +1,66 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+// https://github.com/docker/cli/blob/master/cli/config/configfile/file.go
+export interface ConfigFile {
+  auths: Record<string, AuthConfig>;
+  HttpHeaders?: Record<string, string>;
+  psFormat?: string;
+  imagesFormat?: string;
+  networksFormat?: string;
+  pluginsFormat?: string;
+  volumesFormat?: string;
+  statsFormat?: string;
+  detachKeys?: string;
+  credsStore?: string;
+  credHelpers?: Record<string, string>;
+  serviceInspectFormat?: string;
+  servicesFormat?: string;
+  tasksFormat?: string;
+  secretFormat?: string;
+  configFormat?: string;
+  nodesFormat?: string;
+  pruneFilters?: string[];
+  proxies?: Record<string, ProxyConfig>;
+  experimental?: string;
+  stackOrchestrator?: string;
+  kubernetes?: KubernetesConfig;
+  currentContext?: string;
+  cliPluginsExtraDirs?: string[];
+  plugins?: Record<string, Record<string, string>>;
+  aliases?: Record<string, string>;
+}
+
+export interface ProxyConfig {
+  httpProxy?: string;
+  httpsProxy?: string;
+  noProxy?: string;
+  ftpProxy?: string;
+}
+
+export interface KubernetesConfig {
+  allNamespaces?: string;
+}
+
+export interface AuthConfig {
+  username?: string;
+  password?: string;
+  auth?: string;
+  email?: string;
+  serveraddress?: string;
+  identitytoken?: string;
+  registrytoken?: string;
+}
--- a/src/types/dockerhub.ts
+++ b/src/types/dockerhub.ts
@@ -0,0 +1,113 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export interface TokenRequest {
+  username: string;
+  password: string;
+}
+
+export interface TokenResponse {
+  token: string;
+  detail: string;
+}
+
+export interface RepositoryRequest {
+  namespace: string;
+  name: string;
+}
+
+export interface RepositoryResponse {
+  user: string;
+  name: string;
+  namespace: string;
+  repository_type: string;
+  status: number;
+  status_description: string;
+  description: string;
+  is_private: boolean;
+  is_automated: boolean;
+  can_edit: boolean;
+  star_count: number;
+  pull_count: number;
+  last_updated: string;
+  date_registered: string;
+  collaborator_count: number;
+  affiliation: string;
+  hub_user: string;
+  has_starred: boolean;
+  full_description: string;
+  permissions: {
+    read: boolean;
+    write: boolean;
+    admin: boolean;
+  };
+  media_types: Array<string>;
+  content_types: Array<string>;
+}
+
+export interface RepositoryTagsRequest {
+  namespace: string;
+  name: string;
+  page?: number;
+  page_size?: number;
+}
+
+export interface RepositoryTagsResponse {
+  count: number;
+  next?: string;
+  previous?: string;
+  results: Array<RepositoryTagsResult>;
+}
+
+export interface RepositoryTagsResult {
+  creator: number;
+  id: number;
+  images: Array<RepositoryTagsResultImage>;
+  last_updated: Date;
+  last_updater: number;
+  last_updater_username: string;
+  name: string;
+  repository: number;
+  full_size: number;
+  v2: boolean;
+  tag_status: string;
+  tag_last_pulled: Date;
+  tag_last_pushed: Date;
+  media_type: string;
+  content_type: string;
+  digest: string;
+}
+
+export interface RepositoryTagsResultImage {
+  architecture: string;
+  features: string;
+  variant?: string;
+  digest: string;
+  os: string;
+  os_features: string;
+  os_version?: string;
+  size: number;
+  status: string;
+  last_pulled: Date;
+  last_pushed: Date;
+}
+
+export interface UpdateRepoDescriptionRequest {
+  name: string;
+  namespace: string;
+  description?: string;
+  full_description: string;
+}
--- a/src/types/git.ts
+++ b/src/types/git.ts
@@ -0,0 +1,19 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {Context as GitHubContext} from '@actions/github/lib/context';
+
+export type Context = GitHubContext;
--- a/src/types/github.ts
+++ b/src/types/github.ts
@@ -0,0 +1,36 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {components as OctoOpenApiTypes} from '@octokit/openapi-types';
+import {JwtPayload} from 'jwt-decode';
+
+export interface GitHubRelease {
+  id: number;
+  tag_name: string;
+  html_url: string;
+  assets: Array<string>;
+}
+
+export type GitHubRepo = OctoOpenApiTypes['schemas']['repository'];
+
+export interface GitHubActionsRuntimeToken extends JwtPayload {
+  ac?: string;
+}
+
+export interface GitHubActionsRuntimeTokenAC {
+  Scope: string;
+  Permission: number;
+}
--- a/src/util.ts
+++ b/src/util.ts
@@ -14,11 +14,19 @@
 * limitations under the License.
 */

+import fs from 'fs';
 import * as core from '@actions/core';
+import * as io from '@actions/io';
 import {parse} from 'csv-parse/sync';

+export interface InputListOpts {
+  ignoreComma?: boolean;
+  comment?: string;
+  quote?: string | boolean | Buffer | null;
+}
+
 export class Util {
-  public static getInputList(name: string, ignoreComma?: boolean): string[] {
+  public static getInputList(name: string, opts?: InputListOpts): string[] {
    const res: Array<string> = [];

    const items = core.getInput(name);
@@ -29,20 +37,24 @@ export class Util {
    const records = parse(items, {
      columns: false,
      relaxQuotes: true,
-      comment: '#',
+      comment: opts?.comment,
      relaxColumnCount: true,
-      skipEmptyLines: true
+      skipEmptyLines: true,
+      quote: opts?.quote
    });

    for (const record of records as Array<string[]>) {
      if (record.length == 1) {
-        res.push(record[0]);
-        continue;
-      } else if (!ignoreComma) {
+        if (opts?.ignoreComma) {
+          res.push(record[0]);
+        } else {
+          res.push(...record[0].split(','));
+        }
+      } else if (!opts?.ignoreComma) {
        res.push(...record);
-        continue;
+      } else {
+        res.push(record.join(','));
      }
-      res.push(record.join(','));
    }

    return res.filter(item => item).map(pat => pat.trim());
@@ -54,12 +66,75 @@ export class Util {
    }
  }

-  public static isValidUrl(url: string): boolean {
+  public static isValidURL(urlStr: string): boolean {
+    let url;
    try {
-      new URL(url);
+      url = new URL(urlStr);
    } catch (e) {
      return false;
    }
-    return true;
+    return url.protocol === 'http:' || url.protocol === 'https:';
+  }
+
+  public static isValidRef(refStr: string): boolean {
+    if (Util.isValidURL(refStr)) {
+      return true;
+    }
+    for (const prefix of ['git://', 'github.com/', 'git@']) {
+      if (refStr.startsWith(prefix)) {
+        return true;
+      }
+    }
+    return false;
+  }
+
+  public static async powershellCommand(script: string, params?: Record<string, string>) {
+    const powershellPath: string = await io.which('powershell', true);
+    const escapedScript = script.replace(/'/g, "''").replace(/"|\n|\r/g, '');
+    const escapedParams: string[] = [];
+    if (params) {
+      for (const key in params) {
+        escapedParams.push(`-${key} '${params[key].replace(/'/g, "''").replace(/"|\n|\r/g, '')}'`);
+      }
+    }
+    return {
+      command: `"${powershellPath}"`,
+      args: ['-NoLogo', '-Sta', '-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Unrestricted', '-Command', `& '${escapedScript}' ${escapedParams.join(' ')}`]
+    };
+  }
+
+  public static isDirectory(p) {
+    try {
+      return fs.lstatSync(p).isDirectory();
+    } catch (_) {
+      // noop
+    }
+    return false;
+  }
+
+  public static trimPrefix(str: string, suffix: string): string {
+    if (!str || !suffix) {
+      return str;
+    }
+    const index = str.indexOf(suffix);
+    if (index !== 0) {
+      return str;
+    }
+    return str.substring(suffix.length);
+  }
+
+  public static trimSuffix(str: string, suffix: string): string {
+    if (!str || !suffix) {
+      return str;
+    }
+    const index = str.lastIndexOf(suffix);
+    if (index === -1 || index + suffix.length !== str.length) {
+      return str;
+    }
+    return str.substring(0, index);
+  }
+
+  public static sleep(seconds: number) {
+    return new Promise(resolve => setTimeout(resolve, seconds * 1000));
  }
 }
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -1,8 +1,9 @@
 {
  "compilerOptions": {
    "esModuleInterop": true,
-    "target": "es6",
-    "module": "commonjs",
+    "target": "ES2022",
+    "module": "nodenext",
+    "moduleResolution": "nodenext",
    "strict": true,
    "declaration": true,
    "sourceMap": true,
@@ -19,6 +20,6 @@
    "./__tests__/**/*",
    "./lib/**/*",
    "node_modules",
-    "jest.config.ts"
+    "jest.config*.ts"
  ]
 }
--- a/yarn.lock
+++ b/yarn.lock