Merge pull request #92 from docker/dependabot/npm_and_yarn/csv-parse-5.3.8

build(deps): bump csv-parse from 5.3.6 to 5.3.8

.eslintrc.json

@@ -29,6 +29,7 @@
       "error", {
         "ignore": ["csv-parse/sync"]
       }
-    ]
+    ],
+    "jest/no-disabled-tests": 0
   }
 }

.github/buildx-releases.json

@@ -1,43 +1,125 @@
 {
   "latest": {
-    "id": 90741208,
-    "tag_name": "v0.10.2",
-    "html_url": "https://github.com/docker/buildx/releases/tag/v0.10.2",
+    "id": 94659464,
+    "tag_name": "v0.10.4",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.10.4",
     "assets": [
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.darwin-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.darwin-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-arm-v6",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-arm-v7",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-ppc64le",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-riscv64",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-s390x",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.windows-amd64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.windows-arm64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/buildx-v0.10.2.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.10.2/checksums.txt"
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/checksums.txt"
+    ]
+  },
+  "v0.10.4": {
+    "id": 94659464,
+    "tag_name": "v0.10.4",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.10.4",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/buildx-v0.10.4.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.4/checksums.txt"
+    ]
+  },
+  "v0.10.3": {
+    "id": 92694870,
+    "tag_name": "v0.10.3",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.10.3",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/buildx-v0.10.3.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.10.3/checksums.txt"
     ]
   },
   "v0.10.2": {

.github/docker-releases.json

@@ -0,0 +1,764 @@
+{
+  "latest": {
+    "id": 99811576,
+    "tag_name": "v23.0.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.4",
+    "assets": []
+  },
+  "v23.0.4": {
+    "id": 99811576,
+    "tag_name": "v23.0.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.4",
+    "assets": []
+  },
+  "v24.0.0-beta.2": {
+    "id": 99544545,
+    "tag_name": "v24.0.0-beta.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.0-beta.2",
+    "assets": []
+  },
+  "v23.0.3": {
+    "id": 98122882,
+    "tag_name": "v23.0.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.3",
+    "assets": []
+  },
+  "v20.10.24": {
+    "id": 98096018,
+    "tag_name": "v20.10.24",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.24",
+    "assets": []
+  },
+  "v24.0.0-beta.1": {
+    "id": 97703002,
+    "tag_name": "v24.0.0-beta.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.0-beta.1",
+    "assets": []
+  },
+  "v23.0.2": {
+    "id": 97163508,
+    "tag_name": "v23.0.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.2",
+    "assets": []
+  },
+  "v23.0.1": {
+    "id": 91964526,
+    "tag_name": "v23.0.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.1",
+    "assets": []
+  },
+  "v23.0.0": {
+    "id": 91109643,
+    "tag_name": "v23.0.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.0",
+    "assets": []
+  },
+  "v23.0.0-rc.4": {
+    "id": 91003797,
+    "tag_name": "v23.0.0-rc.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.0-rc.4",
+    "assets": []
+  },
+  "v23.0.0-rc.3": {
+    "id": 89780703,
+    "tag_name": "v23.0.0-rc.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.0-rc.3",
+    "assets": []
+  },
+  "v20.10.23": {
+    "id": 89647366,
+    "tag_name": "v20.10.23",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.23",
+    "assets": []
+  },
+  "v23.0.0-rc.2": {
+    "id": 88712255,
+    "tag_name": "v23.0.0-rc.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.0-rc.2",
+    "assets": []
+  },
+  "v23.0.0-rc.1": {
+    "id": 87299039,
+    "tag_name": "v23.0.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.0-rc.1",
+    "assets": []
+  },
+  "v20.10.22": {
+    "id": 86325342,
+    "tag_name": "v20.10.22",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.22",
+    "assets": []
+  },
+  "v23.0.0-beta.1": {
+    "id": 85159482,
+    "tag_name": "v23.0.0-beta.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.0-beta.1",
+    "assets": []
+  },
+  "v20.10.21": {
+    "id": 80977884,
+    "tag_name": "v20.10.21",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.21",
+    "assets": []
+  },
+  "v20.10.20": {
+    "id": 80248420,
+    "tag_name": "v20.10.20",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.20",
+    "assets": []
+  },
+  "v20.10.19": {
+    "id": 79847378,
+    "tag_name": "v20.10.19",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.19",
+    "assets": []
+  },
+  "v20.10.18": {
+    "id": 76694729,
+    "tag_name": "v20.10.18",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.18",
+    "assets": []
+  },
+  "v20.10.17": {
+    "id": 68777665,
+    "tag_name": "v20.10.17",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.17",
+    "assets": []
+  },
+  "v22.06.0-beta.0": {
+    "id": 68600276,
+    "tag_name": "v22.06.0-beta.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v22.06.0-beta.0",
+    "assets": []
+  },
+  "v20.10.16": {
+    "id": 66708640,
+    "tag_name": "v20.10.16",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.16",
+    "assets": []
+  },
+  "v20.10.15": {
+    "id": 66170410,
+    "tag_name": "v20.10.15",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.15",
+    "assets": []
+  },
+  "v20.10.14": {
+    "id": 62642891,
+    "tag_name": "v20.10.14",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.14",
+    "assets": []
+  },
+  "v20.10.13": {
+    "id": 61523032,
+    "tag_name": "v20.10.13",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.13",
+    "assets": []
+  },
+  "v20.10.12": {
+    "id": 56724849,
+    "tag_name": "v20.10.12",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.12",
+    "assets": []
+  },
+  "v20.10.11": {
+    "id": 53604359,
+    "tag_name": "v20.10.11",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.11",
+    "assets": []
+  },
+  "v20.10.10": {
+    "id": 51991530,
+    "tag_name": "v20.10.10",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.10",
+    "assets": []
+  },
+  "v20.10.9": {
+    "id": 50763745,
+    "tag_name": "v20.10.9",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.9",
+    "assets": []
+  },
+  "v20.10.8": {
+    "id": 47261111,
+    "tag_name": "v20.10.8",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.8",
+    "assets": []
+  },
+  "v20.10.7": {
+    "id": 44002175,
+    "tag_name": "v20.10.7",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.7",
+    "assets": []
+  },
+  "v20.10.6": {
+    "id": 41439201,
+    "tag_name": "v20.10.6",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.6",
+    "assets": []
+  },
+  "v20.10.5": {
+    "id": 39216180,
+    "tag_name": "v20.10.5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.5",
+    "assets": []
+  },
+  "v20.10.4": {
+    "id": 39014860,
+    "tag_name": "v20.10.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.4",
+    "assets": []
+  },
+  "v20.10.3": {
+    "id": 37231470,
+    "tag_name": "v20.10.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.3",
+    "assets": []
+  },
+  "v19.03.15": {
+    "id": 37231443,
+    "tag_name": "v19.03.15",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.15",
+    "assets": []
+  },
+  "v20.10.2": {
+    "id": 35990169,
+    "tag_name": "v20.10.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.2",
+    "assets": []
+  },
+  "v20.10.1": {
+    "id": 35281927,
+    "tag_name": "v20.10.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.1",
+    "assets": []
+  },
+  "v20.10.0": {
+    "id": 35069369,
+    "tag_name": "v20.10.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v20.10.0",
+    "assets": []
+  },
+  "v19.03.14": {
+    "id": 34677482,
+    "tag_name": "v19.03.14",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.14",
+    "assets": []
+  },
+  "v19.03.13": {
+    "id": 31493434,
+    "tag_name": "v19.03.13",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.13",
+    "assets": []
+  },
+  "v19.03.12": {
+    "id": 28065393,
+    "tag_name": "v19.03.12",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.12",
+    "assets": []
+  },
+  "v19.03.11": {
+    "id": 27237950,
+    "tag_name": "v19.03.11",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.11",
+    "assets": []
+  },
+  "v19.03.10": {
+    "id": 27043306,
+    "tag_name": "v19.03.10",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.10",
+    "assets": []
+  },
+  "v19.03.9": {
+    "id": 27002855,
+    "tag_name": "v19.03.9",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.9",
+    "assets": []
+  },
+  "v19.03.8": {
+    "id": 25372883,
+    "tag_name": "v19.03.8",
+    "html_url": "https://github.com/moby/moby/releases/tag/v19.03.8",
+    "assets": []
+  },
+  "v17.03.2-ce": {
+    "id": 6858533,
+    "tag_name": "v17.03.2-ce",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.03.2-ce",
+    "assets": []
+  },
+  "v17.03.2-ce-rc1": {
+    "id": 6547028,
+    "tag_name": "v17.03.2-ce-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.03.2-ce-rc1",
+    "assets": []
+  },
+  "v17.05.0-ce": {
+    "id": 6295254,
+    "tag_name": "v17.05.0-ce",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.05.0-ce",
+    "assets": []
+  },
+  "v17.05.0-ce-rc3": {
+    "id": 6259851,
+    "tag_name": "v17.05.0-ce-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.05.0-ce-rc3",
+    "assets": []
+  },
+  "v17.05.0-ce-rc2": {
+    "id": 6216216,
+    "tag_name": "v17.05.0-ce-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.05.0-ce-rc2",
+    "assets": []
+  },
+  "v17.05.0-ce-rc1": {
+    "id": 6066291,
+    "tag_name": "v17.05.0-ce-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.05.0-ce-rc1",
+    "assets": []
+  },
+  "v17.04.0-ce": {
+    "id": 5992837,
+    "tag_name": "v17.04.0-ce",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.04.0-ce",
+    "assets": []
+  },
+  "v17.04.0-ce-rc2": {
+    "id": 5930499,
+    "tag_name": "v17.04.0-ce-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.04.0-ce-rc2",
+    "assets": []
+  },
+  "v17.03.1-ce": {
+    "id": 5889333,
+    "tag_name": "v17.03.1-ce",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.03.1-ce",
+    "assets": []
+  },
+  "v17.04.0-ce-rc1": {
+    "id": 5821903,
+    "tag_name": "v17.04.0-ce-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.04.0-ce-rc1",
+    "assets": []
+  },
+  "v17.03.1-ce-rc1": {
+    "id": 5787909,
+    "tag_name": "v17.03.1-ce-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.03.1-ce-rc1",
+    "assets": []
+  },
+  "v17.03.0-ce": {
+    "id": 5616072,
+    "tag_name": "v17.03.0-ce",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.03.0-ce",
+    "assets": []
+  },
+  "v17.03.0-ce-rc1": {
+    "id": 5516127,
+    "tag_name": "v17.03.0-ce-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v17.03.0-ce-rc1",
+    "assets": []
+  },
+  "v1.13.1": {
+    "id": 5400129,
+    "tag_name": "v1.13.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.1",
+    "assets": []
+  },
+  "v1.13.1-rc2": {
+    "id": 5385634,
+    "tag_name": "v1.13.1-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.1-rc2",
+    "assets": []
+  },
+  "v1.13.1-rc1": {
+    "id": 5307652,
+    "tag_name": "v1.13.1-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.1-rc1",
+    "assets": []
+  },
+  "v1.13.0": {
+    "id": 5196571,
+    "tag_name": "v1.13.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0",
+    "assets": []
+  },
+  "v1.13.0-rc7": {
+    "id": 5157693,
+    "tag_name": "v1.13.0-rc7",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc7",
+    "assets": []
+  },
+  "v1.13.0-rc6": {
+    "id": 5135134,
+    "tag_name": "v1.13.0-rc6",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc6",
+    "assets": []
+  },
+  "v1.12.6": {
+    "id": 5123890,
+    "tag_name": "v1.12.6",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.6",
+    "assets": []
+  },
+  "v1.13.0-rc5": {
+    "id": 5080578,
+    "tag_name": "v1.13.0-rc5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc5",
+    "assets": []
+  },
+  "v1.13.0-rc4": {
+    "id": 4948866,
+    "tag_name": "v1.13.0-rc4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc4",
+    "assets": []
+  },
+  "v1.12.5": {
+    "id": 4938198,
+    "tag_name": "v1.12.5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.5",
+    "assets": []
+  },
+  "v1.12.5-rc1": {
+    "id": 4926422,
+    "tag_name": "v1.12.5-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.5-rc1",
+    "assets": []
+  },
+  "v1.12.4": {
+    "id": 4901878,
+    "tag_name": "v1.12.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.4",
+    "assets": []
+  },
+  "v1.12.4-rc1": {
+    "id": 4863914,
+    "tag_name": "v1.12.4-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.4-rc1",
+    "assets": []
+  },
+  "v1.13.0-rc3": {
+    "id": 4840704,
+    "tag_name": "v1.13.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc3",
+    "assets": []
+  },
+  "v1.13.0-rc2": {
+    "id": 4744761,
+    "tag_name": "v1.13.0-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc2",
+    "assets": []
+  },
+  "v1.13.0-rc1": {
+    "id": 4641203,
+    "tag_name": "v1.13.0-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.13.0-rc1",
+    "assets": []
+  },
+  "v1.12.3": {
+    "id": 4495222,
+    "tag_name": "v1.12.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.3",
+    "assets": []
+  },
+  "v1.12.3-rc1": {
+    "id": 4481016,
+    "tag_name": "v1.12.3-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.3-rc1",
+    "assets": []
+  },
+  "v1.12.2": {
+    "id": 4364345,
+    "tag_name": "v1.12.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.2",
+    "assets": []
+  },
+  "v1.12.2-rc3": {
+    "id": 4336430,
+    "tag_name": "v1.12.2-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.2-rc3",
+    "assets": []
+  },
+  "v1.12.2-rc2": {
+    "id": 4304701,
+    "tag_name": "v1.12.2-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.2-rc2",
+    "assets": []
+  },
+  "v1.12.2-rc1": {
+    "id": 4246481,
+    "tag_name": "v1.12.2-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.2-rc1",
+    "assets": []
+  },
+  "v1.12.1": {
+    "id": 3919520,
+    "tag_name": "v1.12.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.1",
+    "assets": []
+  },
+  "v1.12.1-rc2": {
+    "id": 3909470,
+    "tag_name": "v1.12.1-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.1-rc2",
+    "assets": []
+  },
+  "v1.12.1-rc1": {
+    "id": 3879305,
+    "tag_name": "v1.12.1-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.1-rc1",
+    "assets": []
+  },
+  "v1.12.0": {
+    "id": 3766135,
+    "tag_name": "v1.12.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.0",
+    "assets": []
+  },
+  "v1.12.0-rc5": {
+    "id": 3744904,
+    "tag_name": "v1.12.0-rc5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.0-rc5",
+    "assets": []
+  },
+  "v1.12.0-rc4": {
+    "id": 3644623,
+    "tag_name": "v1.12.0-rc4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.0-rc4",
+    "assets": []
+  },
+  "v1.12.0-rc3": {
+    "id": 3573896,
+    "tag_name": "v1.12.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.0-rc3",
+    "assets": []
+  },
+  "v1.12.0-rc2": {
+    "id": 3471944,
+    "tag_name": "v1.12.0-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.0-rc2",
+    "assets": []
+  },
+  "v1.12.0-rc1": {
+    "id": 3447699,
+    "tag_name": "v1.12.0-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.12.0-rc1",
+    "assets": []
+  },
+  "v1.11.2": {
+    "id": 3354503,
+    "tag_name": "v1.11.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.2",
+    "assets": []
+  },
+  "v1.11.2-rc1": {
+    "id": 3327300,
+    "tag_name": "v1.11.2-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.2-rc1",
+    "assets": []
+  },
+  "v1.11.1": {
+    "id": 3105125,
+    "tag_name": "v1.11.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.1",
+    "assets": []
+  },
+  "v1.11.1-rc1": {
+    "id": 3097597,
+    "tag_name": "v1.11.1-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.1-rc1",
+    "assets": []
+  },
+  "v1.11.0": {
+    "id": 3014278,
+    "tag_name": "v1.11.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.0",
+    "assets": []
+  },
+  "v1.11.0-rc5": {
+    "id": 2998258,
+    "tag_name": "v1.11.0-rc5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.0-rc5",
+    "assets": []
+  },
+  "v1.11.0-rc4": {
+    "id": 2968912,
+    "tag_name": "v1.11.0-rc4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.0-rc4",
+    "assets": []
+  },
+  "v1.11.0-rc3": {
+    "id": 2937939,
+    "tag_name": "v1.11.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.0-rc3",
+    "assets": []
+  },
+  "v1.11.0-rc2": {
+    "id": 2890861,
+    "tag_name": "v1.11.0-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.0-rc2",
+    "assets": []
+  },
+  "v1.11.0-rc1": {
+    "id": 2875983,
+    "tag_name": "v1.11.0-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.11.0-rc1",
+    "assets": []
+  },
+  "v1.10.3": {
+    "id": 2788494,
+    "tag_name": "v1.10.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.3",
+    "assets": []
+  },
+  "v1.10.3-rc2": {
+    "id": 2780060,
+    "tag_name": "v1.10.3-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.3-rc2",
+    "assets": []
+  },
+  "v1.10.3-rc1": {
+    "id": 2777835,
+    "tag_name": "v1.10.3-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.3-rc1",
+    "assets": []
+  },
+  "v1.10.2": {
+    "id": 2666504,
+    "tag_name": "v1.10.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.2",
+    "assets": []
+  },
+  "v1.10.2-rc1": {
+    "id": 2652399,
+    "tag_name": "v1.10.2-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.2-rc1",
+    "assets": []
+  },
+  "v1.10.1": {
+    "id": 2598018,
+    "tag_name": "v1.10.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.1",
+    "assets": []
+  },
+  "v1.10.1-rc1": {
+    "id": 2590708,
+    "tag_name": "v1.10.1-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.1-rc1",
+    "assets": []
+  },
+  "v1.10.0": {
+    "id": 2555659,
+    "tag_name": "v1.10.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.0",
+    "assets": []
+  },
+  "v1.10.0-rc4": {
+    "id": 2549294,
+    "tag_name": "v1.10.0-rc4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.0-rc4",
+    "assets": []
+  },
+  "v1.10.0-rc3": {
+    "id": 2541607,
+    "tag_name": "v1.10.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.0-rc3",
+    "assets": []
+  },
+  "v1.10.0-rc2": {
+    "id": 2505382,
+    "tag_name": "v1.10.0-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.0-rc2",
+    "assets": []
+  },
+  "v1.10.0-rc1": {
+    "id": 2437435,
+    "tag_name": "v1.10.0-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.10.0-rc1",
+    "assets": []
+  },
+  "v1.9.1": {
+    "id": 2161885,
+    "tag_name": "v1.9.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.1",
+    "assets": []
+  },
+  "v1.9.1-rc1": {
+    "id": 2124307,
+    "tag_name": "v1.9.1-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.1-rc1",
+    "assets": []
+  },
+  "v1.9.0": {
+    "id": 2065556,
+    "tag_name": "v1.9.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.0",
+    "assets": []
+  },
+  "v1.9.0-rc5": {
+    "id": 2063038,
+    "tag_name": "v1.9.0-rc5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.0-rc5",
+    "assets": []
+  },
+  "v1.9.0-rc4": {
+    "id": 2051407,
+    "tag_name": "v1.9.0-rc4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.0-rc4",
+    "assets": []
+  },
+  "v1.9.0-rc3": {
+    "id": 2030176,
+    "tag_name": "v1.9.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.0-rc3",
+    "assets": []
+  },
+  "v1.9.0-rc2": {
+    "id": 2006252,
+    "tag_name": "v1.9.0-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.0-rc2",
+    "assets": []
+  },
+  "v1.9.0-rc1": {
+    "id": 1960642,
+    "tag_name": "v1.9.0-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.9.0-rc1",
+    "assets": []
+  },
+  "v1.8.3": {
+    "id": 1948004,
+    "tag_name": "v1.8.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.8.3",
+    "assets": []
+  },
+  "v1.8.2": {
+    "id": 1796575,
+    "tag_name": "v1.8.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.8.2",
+    "assets": []
+  },
+  "v1.8.2-rc1": {
+    "id": 1765231,
+    "tag_name": "v1.8.2-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.8.2-rc1",
+    "assets": []
+  },
+  "v1.8.1": {
+    "id": 1665370,
+    "tag_name": "v1.8.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.8.1",
+    "assets": []
+  },
+  "v1.8.0": {
+    "id": 1657439,
+    "tag_name": "v1.8.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.8.0",
+    "assets": []
+  },
+  "v1.8.0-rc3": {
+    "id": 1643499,
+    "tag_name": "v1.8.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v1.8.0-rc3",
+    "assets": []
+  }
+}

.github/workflows/build.yml

@@ -0,0 +1,26 @@
+name: build
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+on:
+  push:
+    branches:
+      - 'main'
+  pull_request:
+    paths-ignore:
+      - '.github/*-releases.json'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v3
+      -
+        name: Build
+        uses: docker/bake-action@v2
+        with:
+          targets: build

.github/workflows/buildx-releases-json.yml

@@ -13,11 +13,11 @@ on:
       - 'main'
   pull_request:
     paths-ignore:
-      - '.github/buildx-releases.json'
+      - '.github/*-releases.json'
 
 jobs:
   generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2a596c917a8ad3e6203ae99b777148525a2e00d5
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@6dc31870ca6c4f8489bf5a408ab38fae60f47eec
     with:
       repository: docker/buildx
       artifact_name: buildx-releases-json
@@ -45,7 +45,7 @@ jobs:
           git add -A .
       -
         name: Create PR
-        uses: peter-evans/create-pull-request@2b011faafdcbc9ceb11414d64d0573f37c774b04
+        uses: peter-evans/create-pull-request@5b4a9f6a9e2af26e5f02351490b90d01eb8ec1e5
         with:
           base: main
           branch: bot/buildx-releases-json

.github/workflows/docker-releases-json.yml

@@ -0,0 +1,58 @@
+name: docker-releases-json
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '0 */12 * * *'
+  push:
+    branches:
+      - 'main'
+  pull_request:
+    paths-ignore:
+      - '.github/*-releases.json'
+
+jobs:
+  generate:
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@6dc31870ca6c4f8489bf5a408ab38fae60f47eec
+    with:
+      repository: moby/moby
+      artifact_name: docker-releases-json
+      filename: docker-releases.json
+    secrets: inherit
+
+  open-pr:
+    runs-on: ubuntu-22.04
+    if: github.event_name != 'pull_request'
+    needs:
+      - generate
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v3
+      -
+        name: Download
+        uses: actions/download-artifact@v3
+        with:
+          name: docker-releases-json
+          path: .github
+      -
+        name: Commit changes
+        run: |
+          git add -A .
+      -
+        name: Create PR
+        uses: peter-evans/create-pull-request@5b4a9f6a9e2af26e5f02351490b90d01eb8ec1e5
+        with:
+          base: main
+          branch: bot/docker-releases-json
+          commit-message: "github: update .github/docker-releases.json"
+          signoff: true
+          delete-branch: true
+          title: "Update `.github/docker-releases.json`"
+          body: |
+            Update `.github/docker-releases.json` to keep in sync with [https://github.com/moby/moby](https://github.com/moby/moby).
+          draft: false

.github/workflows/publish.yml

@@ -1,5 +1,9 @@
 name: publish
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 on:
   push:
     tags:

.github/workflows/test.yml

@@ -1,33 +1,19 @@
 name: test
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 on:
+  workflow_dispatch:
   push:
     branches:
       - 'main'
   pull_request:
     paths-ignore:
-      - '.github/buildx-releases.json'
+      - '.github/*-releases.json'
 
 jobs:
-  validate:
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        target:
-          - lint
-          - vendor-validate
-          - license-validate
-    steps:
-      -
-        name: Checkout
-        uses: actions/checkout@v3
-      -
-        name: Validate
-        uses: docker/bake-action@v2
-        with:
-          targets: ${{ matrix.target }}
-
   test:
     runs-on: ubuntu-latest
     steps:
@@ -41,8 +27,82 @@ jobs:
           targets: test-coverage
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-#      -
-#        name: Upload coverage
-#        uses: codecov/codecov-action@v3
-#        with:
-#          file: ./coverage/clover.xml
+      -
+        name: Upload coverage
+        uses: codecov/codecov-action@v3
+        with:
+          file: ./coverage/clover.xml
+          flags: unit
+
+  prepare-itg:
+    runs-on: ubuntu-latest
+    outputs:
+      matrix: ${{ steps.tests.outputs.matrix }}
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v3
+      -
+        name: Setup Node
+        uses: actions/setup-node@v3
+        with:
+          node-version: 16
+          cache: 'yarn'
+      -
+        name: Install
+        run: yarn install
+      -
+        name: Create matrix
+        id: tests
+        run: |
+          declare -a tests
+          for test in $(yarn run test:itg-list); do
+            tests+=("${test#$(pwd)/__tests__/}")
+          done
+          echo "matrix=$(echo ${tests[@]} | jq -cR 'split(" ")')" >>${GITHUB_OUTPUT}
+      -
+        name: Show matrix
+        run: |
+          echo ${{ steps.tests.outputs.matrix }}
+
+  test-itg:
+    runs-on: ${{ matrix.os }}
+    needs:
+      - prepare-itg
+    strategy:
+      fail-fast: false
+      matrix:
+        test: ${{ fromJson(needs.prepare-itg.outputs.matrix) }}
+        os:
+          - ubuntu-latest
+          - macos-latest
+          - windows-latest
+        exclude:
+          - os: macos-latest
+            test: buildx/bake.test.itg.ts
+          - os: windows-latest
+            test: buildx/bake.test.itg.ts
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v3
+      -
+        name: Setup Node
+        uses: actions/setup-node@v3
+        with:
+          node-version: 16
+          cache: 'yarn'
+      -
+        name: Install
+        run: yarn install
+      -
+        name: Test
+        run: yarn test:itg-coverage --runTestsByPath __tests__/${{ matrix.test }} --coverageDirectory=./coverage
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      -
+        name: Upload coverage
+        uses: codecov/codecov-action@v3
+        with:
+          file: ./coverage/clover.xml
+          flags: itg

.github/workflows/validate.yml

@@ -0,0 +1,47 @@
+name: validate
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'main'
+  pull_request:
+    paths-ignore:
+      - '.github/*-releases.json'
+
+jobs:
+  prepare:
+    runs-on: ubuntu-20.04
+    outputs:
+      targets: ${{ steps.targets.outputs.matrix }}
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v3
+      -
+        name: Matrix
+        id: targets
+        run: |
+          echo "matrix=$(docker buildx bake validate --print | jq -cr '.group.validate.targets')" >> $GITHUB_OUTPUT
+
+  validate:
+    runs-on: ubuntu-latest
+    needs:
+      - prepare
+    strategy:
+      fail-fast: false
+      matrix:
+        target: ${{ fromJson(needs.prepare.outputs.targets) }}
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v3
+      -
+        name: Validate
+        uses: docker/bake-action@v2
+        with:
+          targets: ${{ matrix.target }}

.github/workflows/virtual-env.yml

@@ -23,7 +23,6 @@ jobs:
           - ubuntu-latest
           - ubuntu-22.04
           - ubuntu-20.04
-          - ubuntu-18.04
     steps:
       -
         name: File system
@@ -67,4 +66,4 @@ jobs:
       -
         name: Dump context
         if: always()
-        uses: crazy-max/ghaction-dump-context@v1
+        uses: crazy-max/ghaction-dump-context@v2

README.md

@@ -1,3 +1,10 @@
+[![Version](https://img.shields.io/npm/v/@docker/actions-toolkit?label=version&logo=npm&style=flat-square)](https://www.npmjs.com/package/@docker/actions-toolkit)
+[![Downloads](https://img.shields.io/npm/dw/@docker/actions-toolkit?logo=npm&style=flat-square)](https://www.npmjs.com/package/@docker/actions-toolkit)
+[![Build workflow](https://img.shields.io/github/actions/workflow/status/docker/actions-toolkit/build.yml?label=build&logo=github&style=flat-square)](https://github.com/docker/actions-toolkit/actions?workflow=build)
+[![Test workflow](https://img.shields.io/github/actions/workflow/status/docker/actions-toolkit/test.yml?label=test&logo=github&style=flat-square)](https://github.com/docker/actions-toolkit/actions?workflow=test)
+[![Validate workflow](https://img.shields.io/github/actions/workflow/status/docker/actions-toolkit/validate.yml?label=validate&logo=github&style=flat-square)](https://github.com/docker/actions-toolkit/actions?workflow=validate)
+[![Codecov](https://img.shields.io/codecov/c/github/docker/actions-toolkit?logo=codecov&style=flat-square)](https://codecov.io/gh/docker/actions-toolkit)
+
 # Actions Toolkit
 
 Toolkit for Docker (GitHub) Actions.
@@ -34,7 +41,7 @@ $ npm install @docker/actions-toolkit
 ## Usage
 
 ```js
-const { Toolkit } = require('@docker/actions-toolkit')
+const { Toolkit } = require('@docker/actions-toolkit/lib/toolkit')
 const toolkit = new Toolkit()
 ```
 

__tests__/buildkit/buildkit.test.ts

@@ -15,11 +15,9 @@
  */
 
 import {beforeEach, describe, expect, it, jest, test} from '@jest/globals';
-import * as semver from 'semver';
 
 import {BuildKit} from '../../src/buildkit/buildkit';
 import {Builder} from '../../src/buildx/builder';
-import {Context} from '../../src/context';
 
 import {BuilderInfo} from '../../src/types/builder';
 
@@ -34,9 +32,9 @@ jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<Bu
     lastActivity: new Date('2023-01-16 09:45:23 +0000 UTC'),
     nodes: [
       {
-        buildkitVersion: 'v0.11.0',
-        buildkitdFlags: '--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host',
-        driverOpts: ['BUILDKIT_STEP_LOG_MAX_SIZE=10485760', 'BUILDKIT_STEP_LOG_MAX_SPEED=10485760', 'JAEGER_TRACE=localhost:6831', 'image=moby/buildkit:latest', 'network=host'],
+        buildkit: 'v0.11.0',
+        'buildkitd-flags': '--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host',
+        'driver-opts': ['BUILDKIT_STEP_LOG_MAX_SIZE=10485760', 'BUILDKIT_STEP_LOG_MAX_SPEED=10485760', 'JAEGER_TRACE=localhost:6831', 'image=moby/buildkit:latest', 'network=host'],
         endpoint: 'unix:///var/run/docker.sock',
         name: 'builder20',
         platforms: 'linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/mips64le,linux/mips64,linux/arm/v7,linux/arm/v6',
@@ -48,11 +46,11 @@ jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<Bu
 
 describe('getVersion', () => {
   it('valid', async () => {
-    const buildkit = new BuildKit({
-      context: new Context()
-    });
-    const version = await buildkit.getVersion('builder2');
-    expect(semver.valid(version)).not.toBeNull();
+    const builder = new Builder();
+    const builderInfo = await builder.inspect('builder2');
+    const buildkit = new BuildKit();
+    const version = await buildkit.getVersion(builderInfo.nodes[0]);
+    expect(version).toBe('v0.11.0');
   });
 });
 
@@ -61,9 +59,7 @@ describe('satisfies', () => {
     ['builder2', '>=0.10.0', true],
     ['builder2', '>0.11.0', false]
   ])('given %p', async (builderName, range, expected) => {
-    const buildkit = new BuildKit({
-      context: new Context()
-    });
+    const buildkit = new BuildKit();
     expect(await buildkit.versionSatisfies(builderName, range)).toBe(expected);
   });
 });

__tests__/buildkit/config.test.ts

@@ -24,16 +24,17 @@ import {Context} from '../../src/context';
 
 const fixturesDir = path.join(__dirname, '..', 'fixtures');
 // prettier-ignore
-const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildkit-config-jest').split(path.sep).join(path.posix.sep);
-const tmpName = path.join(tmpDir, '.tmpname-jest').split(path.sep).join(path.posix.sep);
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildkit-config-jest');
+const tmpName = path.join(tmpDir, '.tmpname-jest');
 
-jest.spyOn(Context.prototype, 'tmpDir').mockImplementation((): string => {
+jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
   if (!fs.existsSync(tmpDir)) {
     fs.mkdirSync(tmpDir, {recursive: true});
   }
   return tmpDir;
 });
-jest.spyOn(Context.prototype, 'tmpName').mockImplementation((): string => {
+
+jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
   return tmpName;
 });
 
@@ -45,12 +46,12 @@ afterEach(() => {
   rimraf.sync(tmpDir);
 });
 
-describe('generate', () => {
+describe('resolve', () => {
   test.each([
     ['debug = true', false, 'debug = true', null],
     [`notfound.toml`, true, '', new Error('config file notfound.toml not found')],
     [
-      `${path.join(fixturesDir, 'buildkitd.toml').split(path.sep).join(path.posix.sep)}`,
+      `${path.join(fixturesDir, 'buildkitd.toml')}`,
       true,
       `debug = true
 [registry."docker.io"]
@@ -58,16 +59,14 @@ describe('generate', () => {
 `,
       null
     ]
-  ])('given %p config', async (val, file, exValue, error: Error) => {
+  ])('given %p config', async (val: string, file: boolean, exValue: string, error: Error | null) => {
     try {
-      const buildkit = new BuildKit({
-        context: new Context()
-      });
+      const buildkit = new BuildKit();
       let config: string;
       if (file) {
-        config = buildkit.config.generateFromFile(val);
+        config = buildkit.config.resolveFromFile(val);
       } else {
-        config = buildkit.config.generateFromString(val);
+        config = buildkit.config.resolveFromString(val);
       }
       expect(config).toEqual(tmpName);
       const configValue = fs.readFileSync(tmpName, 'utf-8');

__tests__/buildx/bake.test.itg.ts

@@ -0,0 +1,43 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {beforeEach, describe, expect, jest, test} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+
+import {Bake} from '../../src/buildx/bake';
+import {BakeDefinition} from '../../src/types/bake';
+
+const fixturesDir = path.join(__dirname, '..', 'fixtures');
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+describe('parseDefinitions', () => {
+  // prettier-ignore
+  test.each([
+    [
+      ['https://github.com/docker/buildx.git#v0.10.4'],
+      ['binaries-cross'],
+      path.join(fixturesDir, 'bake-buildx-0.10.4-binaries-cross.json')
+    ]
+  ])('given %p', async (sources: string[], targets: string[], out: string) => {
+    const bake = new Bake();
+    const expectedDef = <BakeDefinition>JSON.parse(fs.readFileSync(out, {encoding: 'utf-8'}).trim())
+    expect(await bake.parseDefinitions(sources, targets)).toEqual(expectedDef);
+  });
+});

__tests__/buildx/bake.test.ts

@@ -0,0 +1,430 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {beforeEach, describe, expect, jest, test} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+
+import {Bake} from '../../src/buildx/bake';
+import {BakeDefinition} from '../../src/types/bake';
+
+const fixturesDir = path.join(__dirname, '..', 'fixtures');
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+describe('parseDefinitions', () => {
+  // prettier-ignore
+  test.each([
+    [
+      [path.join(fixturesDir, 'bake-01.hcl')],
+      ['validate'],
+      [],
+      path.join(fixturesDir, 'bake-01-validate.json')
+    ],
+    [
+      [path.join(fixturesDir, 'bake-02.hcl')],
+      ['build'],
+      [],
+      path.join(fixturesDir, 'bake-02-build.json')
+    ],
+    [
+      [path.join(fixturesDir, 'bake-01.hcl')],
+      ['image'],
+      ['*.output=type=docker', '*.platform=linux/amd64'],
+      path.join(fixturesDir, 'bake-01-overrides.json')
+    ]
+  ])('given %p', async (sources: string[], targets: string[], overrides: string[], out: string) => {
+    const bake = new Bake();
+    const expectedDef = <BakeDefinition>JSON.parse(fs.readFileSync(out, {encoding: 'utf-8'}).trim())
+    expect(await bake.parseDefinitions(sources, targets, overrides)).toEqual(expectedDef);
+  });
+});
+
+describe('hasLocalExporter', () => {
+  // prettier-ignore
+  test.each([
+    [
+      {
+        "target": {
+          "build": {
+            "output": [
+              "type=docker"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "target": "build"
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              "type=local,dest=./release-out"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              "type=tar,dest=/tmp/image.tar"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              '"type=tar","dest=/tmp/image.tar"',
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              '" type= local" , dest=./release-out',
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              ".",
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ]
+  ])('given %o returns %p', async (def: BakeDefinition, expected: boolean) => {
+    expect(Bake.hasLocalExporter(def)).toEqual(expected);
+  });
+});
+
+describe('hasTarExporter', () => {
+  // prettier-ignore
+  test.each([
+    [
+      {
+        "target": {
+          "reg": {
+            "output": [
+              "type=registry,ref=user/app"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "output": [
+              "type=docker"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              "type=local,dest=./release-out"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              "type=tar,dest=/tmp/image.tar"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "multi": {
+            "output": [
+              "type=docker",
+              "type=tar,dest=/tmp/image.tar"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              '"type=tar","dest=/tmp/image.tar"',
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              '" type= local" , dest=./release-out',
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              ".",
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false
+    ],
+  ])('given %o returns %p', async (def: BakeDefinition, expected: boolean) => {
+    expect(Bake.hasTarExporter(def)).toEqual(expected);
+  });
+});
+
+describe('hasDockerExporter', () => {
+  // prettier-ignore
+  test.each([
+    [
+      {
+        "target": {
+          "reg": {
+            "output": [
+              "type=registry,ref=user/app"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "output": [
+              "type=docker"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "multi": {
+            "output": [
+              "type=docker",
+              "type=tar,dest=/tmp/image.tar"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              '" type= local" , dest=./release-out'
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              "type=local,dest=./release-out"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              "type=tar,dest=/tmp/image.tar"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "multi": {
+            "output": [
+              "type=docker",
+              "type=tar,dest=/tmp/image.tar"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              '"type=tar","dest=/tmp/image.tar"'
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "tar": {
+            "output": [
+              '"type=tar","dest=/tmp/image.tar"'
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "local": {
+            "output": [
+              '" type= local" , dest=./release-out'
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      false,
+      undefined
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "output": [
+              "type=docker"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true,
+      false
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "output": [
+              "type=docker"
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true,
+      true
+    ],
+    [
+      {
+        "target": {
+          "build": {
+            "output": [
+              "."
+            ]
+          },
+        }
+      } as unknown as BakeDefinition,
+      true,
+      true
+    ],
+  ])('given %o and load:%p returns %p', async (def: BakeDefinition, expected: boolean, load: boolean | undefined) => {
+    expect(Bake.hasDockerExporter(def, load)).toEqual(expected);
+  });
+});

__tests__/buildx/builder.test.ts

@@ -19,7 +19,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 
 import {Builder} from '../../src/buildx/builder';
-import {Context} from '../../src/context';
+import {Exec} from '../../src/exec';
 
 import {BuilderInfo} from '../../src/types/builder';
 
@@ -36,9 +36,9 @@ jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<Bu
     lastActivity: new Date('2023-01-16 09:45:23 +0000 UTC'),
     nodes: [
       {
-        buildkitVersion: 'v0.11.0',
-        buildkitdFlags: '--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host',
-        driverOpts: ['BUILDKIT_STEP_LOG_MAX_SIZE=10485760', 'BUILDKIT_STEP_LOG_MAX_SPEED=10485760', 'JAEGER_TRACE=localhost:6831', 'image=moby/buildkit:latest', 'network=host'],
+        buildkit: 'v0.11.0',
+        'buildkitd-flags': '--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host',
+        'driver-opts': ['BUILDKIT_STEP_LOG_MAX_SIZE=10485760', 'BUILDKIT_STEP_LOG_MAX_SPEED=10485760', 'JAEGER_TRACE=localhost:6831', 'image=moby/buildkit:latest', 'network=host', 'qemu.install=true'],
         endpoint: 'unix:///var/run/docker.sock',
         name: 'builder20',
         platforms: 'linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/mips64le,linux/mips64,linux/arm/v7,linux/arm/v6',
@@ -48,11 +48,22 @@ jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<Bu
   };
 });
 
+describe('exists', () => {
+  it('valid', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    const builder = new Builder();
+    await builder.exists('foo');
+    // eslint-disable-next-line jest/no-standalone-expect
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['buildx', 'inspect', 'foo'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+});
+
 describe('inspect', () => {
   it('valid', async () => {
-    const builder = new Builder({
-      context: new Context()
-    });
+    const builder = new Builder();
     const builderInfo = await builder.inspect('');
     expect(builderInfo).not.toBeUndefined();
     expect(builderInfo.name).not.toEqual('');
@@ -74,8 +85,8 @@ describe('parseInspect', () => {
            "name": "builder-5cb467f7-0940-47e1-b94b-d51f54054d620",
            "endpoint": "unix:///var/run/docker.sock",
            "status": "running",
-           "buildkitdFlags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
-           "buildkitVersion": "v0.10.4",
+           "buildkitd-flags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
+           "buildkit": "v0.10.4",
            "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/amd64/v4,linux/arm64,linux/riscv64,linux/386,linux/arm/v7,linux/arm/v6"
          }
        ]
@@ -90,12 +101,12 @@ describe('parseInspect', () => {
          {
            "name": "builder-5f449644-ff29-48af-8344-abb0292d06730",
            "endpoint": "unix:///var/run/docker.sock",
-           "driverOpts": [
+           "driver-opts": [
              "image=moby/buildkit:latest"
            ],
            "status": "running",
-           "buildkitdFlags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
-           "buildkitVersion": "v0.10.4",
+           "buildkitd-flags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
+           "buildkit": "v0.10.4",
            "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/amd64/v4,linux/386"
          }
        ]
@@ -110,13 +121,13 @@ describe('parseInspect', () => {
          {
            "name": "builder-9929e463-7954-4dc3-89cd-514cca29ff800",
            "endpoint": "unix:///var/run/docker.sock",
-           "driverOpts": [
+           "driver-opts": [
              "image=moby/buildkit:master",
              "network=host"
            ],
            "status": "running",
-           "buildkitdFlags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
-           "buildkitVersion": "3fab389",
+           "buildkitd-flags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
+           "buildkit": "3fab389",
            "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/amd64/v4,linux/386"
          }
        ]
@@ -132,7 +143,7 @@ describe('parseInspect', () => {
            "name": "default",
            "endpoint": "default",
            "status": "running",
-           "buildkitVersion": "20.10.17",
+           "buildkit": "20.10.17",
            "platforms": "linux/amd64,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/arm/v7,linux/arm/v6"
          }
        ]
@@ -147,7 +158,7 @@ describe('parseInspect', () => {
          {
            "name": "aws_graviton2",
            "endpoint": "tcp://1.23.45.67:1234",
-           "driverOpts": [
+           "driver-opts": [
              "cert=/home/user/.certs/aws_graviton2/cert.pem",
              "key=/home/user/.certs/aws_graviton2/key.pem",
              "cacert=/home/user/.certs/aws_graviton2/ca.pem"
@@ -166,7 +177,7 @@ describe('parseInspect', () => {
            "name": "builder-17cfff01-48d9-4c3d-9332-9992e308a5100",
            "endpoint": "unix:///var/run/docker.sock",
            "status": "running",
-           "buildkitdFlags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
+           "buildkitd-flags": "--allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
            "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/386"
          }
        ],
@@ -182,14 +193,15 @@ describe('parseInspect', () => {
        "lastActivity": new Date("2023-01-16T09:45:23.000Z"),
        "nodes": [
          {
-           "buildkitVersion": "v0.11.0",
-           "buildkitdFlags": "--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
-           "driverOpts": [
-             "BUILDKIT_STEP_LOG_MAX_SIZE=10485760",
-             "BUILDKIT_STEP_LOG_MAX_SPEED=10485760",
-             "JAEGER_TRACE=localhost:6831",
+           "buildkit": "v0.11.0",
+           "buildkitd-flags": "--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host",
+           "driver-opts": [
+             "env.BUILDKIT_STEP_LOG_MAX_SIZE=10485760",
+             "env.BUILDKIT_STEP_LOG_MAX_SPEED=10485760",
+             "env.JAEGER_TRACE=localhost:6831",
              "image=moby/buildkit:latest",
-             "network=host"
+             "network=host",
+             "qemu.install=true"
            ],
            "endpoint": "unix:///var/run/docker.sock",
            "name": "builder20",

__tests__/buildx/buildx.test.ts

@@ -19,22 +19,25 @@ import * as fs from 'fs';
 import * as path from 'path';
 import * as rimraf from 'rimraf';
 import * as semver from 'semver';
-import * as exec from '@actions/exec';
 
 import {Buildx} from '../../src/buildx/buildx';
 import {Context} from '../../src/context';
+import {Exec} from '../../src/exec';
+
+import {Cert} from '../../src/types/buildx';
 
 // prettier-ignore
-const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-jest').split(path.sep).join(path.posix.sep);
-const tmpName = path.join(tmpDir, '.tmpname-jest').split(path.sep).join(path.posix.sep);
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-jest');
+const tmpName = path.join(tmpDir, '.tmpname-jest');
 
-jest.spyOn(Context.prototype, 'tmpDir').mockImplementation((): string => {
+jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
   if (!fs.existsSync(tmpDir)) {
     fs.mkdirSync(tmpDir, {recursive: true});
   }
   return tmpDir;
 });
-jest.spyOn(Context.prototype, 'tmpName').mockImplementation((): string => {
+
+jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
   return tmpName;
 });
 
@@ -46,16 +49,53 @@ afterEach(() => {
   rimraf.sync(tmpDir);
 });
 
+describe('configDir', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv,
+      BUILDX_CONFIG: '/var/docker/buildx',
+      DOCKER_CONFIG: '/var/docker/config'
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+  it('returns default', async () => {
+    process.env.BUILDX_CONFIG = '';
+    expect(Buildx.configDir).toEqual(path.join('/var/docker/config', 'buildx'));
+  });
+  it('returns from env', async () => {
+    expect(Buildx.configDir).toEqual('/var/docker/buildx');
+  });
+});
+
+describe('certsDir', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv,
+      BUILDX_CONFIG: '/var/docker/buildx'
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+  it('returns default', async () => {
+    process.env.BUILDX_CONFIG = '/var/docker/buildx';
+    expect(Buildx.certsDir).toEqual(path.join('/var/docker/buildx', 'certs'));
+  });
+});
+
 describe('isAvailable', () => {
   it('docker cli', async () => {
-    const execSpy = jest.spyOn(exec, 'getExecOutput');
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
     const buildx = new Buildx({
-      context: new Context(),
       standalone: false
     });
-    buildx.isAvailable().catch(() => {
-      // noop
-    });
+    await buildx.isAvailable();
     // eslint-disable-next-line jest/no-standalone-expect
     expect(execSpy).toHaveBeenCalledWith(`docker`, ['buildx'], {
       silent: true,
@@ -63,14 +103,11 @@ describe('isAvailable', () => {
     });
   });
   it('standalone', async () => {
-    const execSpy = jest.spyOn(exec, 'getExecOutput');
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
     const buildx = new Buildx({
-      context: new Context(),
       standalone: true
     });
-    buildx.isAvailable().catch(() => {
-      // noop
-    });
+    await buildx.isAvailable();
     // eslint-disable-next-line jest/no-standalone-expect
     expect(execSpy).toHaveBeenCalledWith(`buildx`, [], {
       silent: true,
@@ -80,13 +117,12 @@ describe('isAvailable', () => {
 });
 
 describe('printInspect', () => {
-  it('prints builder2 instance', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
+  it('prints builder2 instance', async () => {
+    const execSpy = jest.spyOn(Exec, 'exec');
     const buildx = new Buildx({
-      context: new Context(),
       standalone: true
     });
-    buildx.printInspect('builder2').catch(() => {
+    await buildx.printInspect('builder2').catch(() => {
       // noop
     });
     expect(execSpy).toHaveBeenCalledWith(`buildx`, ['inspect', 'builder2'], {
@@ -96,24 +132,22 @@ describe('printInspect', () => {
 });
 
 describe('printVersion', () => {
-  it('docker cli', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
+  it('docker cli', async () => {
+    const execSpy = jest.spyOn(Exec, 'exec');
     const buildx = new Buildx({
-      context: new Context(),
       standalone: false
     });
-    buildx.printVersion();
+    await buildx.printVersion();
     expect(execSpy).toHaveBeenCalledWith(`docker`, ['buildx', 'version'], {
       failOnStdErr: false
     });
   });
-  it('standalone', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
+  it('standalone', async () => {
+    const execSpy = jest.spyOn(Exec, 'exec');
     const buildx = new Buildx({
-      context: new Context(),
       standalone: true
     });
-    buildx.printVersion();
+    await buildx.printVersion();
     expect(execSpy).toHaveBeenCalledWith(`buildx`, ['version'], {
       failOnStdErr: false
     });
@@ -122,10 +156,8 @@ describe('printVersion', () => {
 
 describe('version', () => {
   it('valid', async () => {
-    const buildx = new Buildx({
-      context: new Context()
-    });
-    expect(semver.valid(await buildx.version)).not.toBeUndefined();
+    const buildx = new Buildx();
+    expect(semver.valid(await buildx.version())).not.toBeUndefined();
   });
 });
 
@@ -146,9 +178,92 @@ describe('versionSatisfies', () => {
     ['bda4882a65349ca359216b135896bddc1d92461c', '>0.1.0', false],
     ['f117971', '>0.6.0', true]
   ])('given %p', async (version, range, expected) => {
-    const buildx = new Buildx({
-      context: new Context()
-    });
+    const buildx = new Buildx();
     expect(await buildx.versionSatisfies(range, version)).toBe(expected);
   });
 });
+
+describe('resolveCertsDriverOpts', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv,
+      BUILDX_CONFIG: path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx')
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+    rimraf.sync(path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx'));
+  });
+  // prettier-ignore
+  test.each([
+    [
+      1,
+      'mycontext',
+      'docker-container',
+      {},
+      [],
+      []
+    ],
+    [
+      2,
+      'docker-container://mycontainer',
+      'docker-container',
+      {},
+      [],
+      []
+    ],
+    [
+      3,
+      'tcp://graviton2:1234',
+      'remote',
+      {},
+      [],
+      []
+    ],
+    [
+      4,
+      'tcp://graviton2:1234',
+      'remote',
+      {
+        cacert: 'foo',
+        cert: 'foo',
+        key: 'foo',
+      } as Cert,
+      [
+        path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'cacert_graviton2-1234.pem'),
+        path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'cert_graviton2-1234.pem'),
+        path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'key_graviton2-1234.pem')
+      ],
+      [
+        `cacert=${path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'cacert_graviton2-1234.pem')}`,
+        `cert=${path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'cert_graviton2-1234.pem')}`,
+        `key=${path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'key_graviton2-1234.pem')}`
+      ]
+    ],
+    [
+      5,
+      'tcp://mybuilder:1234',
+      'docker-container',
+      {
+        cacert: 'foo',
+        cert: 'foo',
+        key: 'foo',
+      } as Cert,
+      [
+        path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'cacert_mybuilder-1234.pem'),
+        path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'cert_mybuilder-1234.pem'),
+        path.join(tmpDir, 'resolveCertsDriverOpts', 'buildx', 'certs', 'key_mybuilder-1234.pem')
+      ],
+      []
+    ],
+  ])('%p. given %p endpoint, %p driver', async (id: number, endpoint: string, driver: string, cert: Cert, expectedFiles: Array<string>, expectedOpts: Array<string>) => {
+    fs.mkdirSync(Buildx.certsDir, {recursive: true});
+    expect(Buildx.resolveCertsDriverOpts(driver, endpoint, cert)).toEqual(expectedOpts);
+    for (const k in expectedFiles) {
+      const file = expectedFiles[k];
+      expect(fs.existsSync(file)).toBe(true);
+    }
+  });
+});

__tests__/buildx/inputs.test.ts

@@ -20,25 +20,25 @@ import * as path from 'path';
 import * as rimraf from 'rimraf';
 
 import {Context} from '../../src/context';
-import {Buildx} from '../../src/buildx/buildx';
 import {Inputs} from '../../src/buildx/inputs';
 
 const fixturesDir = path.join(__dirname, '..', 'fixtures');
 // prettier-ignore
-const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-inputs-jest').split(path.sep).join(path.posix.sep);
-const tmpName = path.join(tmpDir, '.tmpname-jest').split(path.sep).join(path.posix.sep);
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-inputs-jest');
+const tmpName = path.join(tmpDir, '.tmpname-jest');
 const metadata = `{
   "containerimage.config.digest": "sha256:059b68a595b22564a1cbc167af369349fdc2ecc1f7bc092c2235cbf601a795fd",
   "containerimage.digest": "sha256:b09b9482c72371486bb2c1d2c2a2633ed1d0b8389e12c8d52b9e052725c0c83c"
 }`;
 
-jest.spyOn(Context.prototype, 'tmpDir').mockImplementation((): string => {
+jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
   if (!fs.existsSync(tmpDir)) {
     fs.mkdirSync(tmpDir, {recursive: true});
   }
   return tmpDir;
 });
-jest.spyOn(Context.prototype, 'tmpName').mockImplementation((): string => {
+
+jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
   return tmpName;
 });
 
@@ -50,39 +50,30 @@ afterEach(() => {
   rimraf.sync(tmpDir);
 });
 
-describe('getBuildImageID', () => {
+describe('resolveBuildImageID', () => {
   it('matches', async () => {
-    const buildx = new Buildx({
-      context: new Context()
-    });
     const imageID = 'sha256:bfb45ab72e46908183546477a08f8867fc40cebadd00af54b071b097aed127a9';
-    const imageIDFile = buildx.inputs.getBuildImageIDFilePath();
+    const imageIDFile = Inputs.getBuildImageIDFilePath();
     await fs.writeFileSync(imageIDFile, imageID);
-    const expected = buildx.inputs.getBuildImageID();
+    const expected = Inputs.resolveBuildImageID();
     expect(expected).toEqual(imageID);
   });
 });
 
-describe('getBuildMetadata', () => {
+describe('resolveBuildMetadata', () => {
   it('matches', async () => {
-    const buildx = new Buildx({
-      context: new Context()
-    });
-    const metadataFile = buildx.inputs.getBuildMetadataFilePath();
+    const metadataFile = Inputs.getBuildMetadataFilePath();
     await fs.writeFileSync(metadataFile, metadata);
-    const expected = buildx.inputs.getBuildMetadata();
+    const expected = Inputs.resolveBuildMetadata();
     expect(expected).toEqual(metadata);
   });
 });
 
-describe('getDigest', () => {
+describe('resolveDigest', () => {
   it('matches', async () => {
-    const buildx = new Buildx({
-      context: new Context()
-    });
-    const metadataFile = buildx.inputs.getBuildMetadataFilePath();
+    const metadataFile = Inputs.getBuildMetadataFilePath();
     await fs.writeFileSync(metadataFile, metadata);
-    const expected = buildx.inputs.getDigest();
+    const expected = Inputs.resolveDigest();
     expect(expected).toEqual('sha256:b09b9482c72371486bb2c1d2c2a2633ed1d0b8389e12c8d52b9e052725c0c83c');
   });
 });
@@ -129,14 +120,11 @@ describe('getProvenanceInput', () => {
     ],
   ])('given input %p', async (input: string, expected: string) => {
     await setInput('provenance', input);
-    const buildx = new Buildx({
-      context: new Context()
-    });
-    expect(buildx.inputs.getProvenanceInput('provenance')).toEqual(expected);
+    expect(Inputs.getProvenanceInput('provenance')).toEqual(expected);
   });
 });
 
-describe('getProvenanceAttrs', () => {
+describe('resolveProvenanceAttrs', () => {
   // prettier-ignore
   test.each([
     [
@@ -160,14 +148,11 @@ describe('getProvenanceAttrs', () => {
       'builder-id=https://github.com/docker/actions-toolkit/actions/runs/123'
     ],
   ])('given %p', async (input: string, expected: string) => {
-    const buildx = new Buildx({
-      context: new Context()
-    });
-    expect(buildx.inputs.getProvenanceAttrs(input)).toEqual(expected);
+    expect(Inputs.resolveProvenanceAttrs(input)).toEqual(expected);
   });
 });
 
-describe('generateBuildSecret', () => {
+describe('resolveBuildSecret', () => {
   test.each([
     ['A_SECRET=abcdef0123456789', false, 'A_SECRET', 'abcdef0123456789', null],
     ['GIT_AUTH_TOKEN=abcdefghijklmno=0123456789', false, 'GIT_AUTH_TOKEN', 'abcdefghijklmno=0123456789', null],
@@ -175,18 +160,15 @@ describe('generateBuildSecret', () => {
     ['aaaaaaaa', false, '', '', new Error('aaaaaaaa is not a valid secret')],
     ['aaaaaaaa=', false, '', '', new Error('aaaaaaaa= is not a valid secret')],
     ['=bbbbbbb', false, '', '', new Error('=bbbbbbb is not a valid secret')],
-    [`foo=${path.join(fixturesDir, 'secret.txt').split(path.sep).join(path.posix.sep)}`, true, 'foo', 'bar', null],
+    [`foo=${path.join(fixturesDir, 'secret.txt')}`, true, 'foo', 'bar', null],
     [`notfound=secret`, true, '', '', new Error('secret file secret not found')]
-  ])('given %p key and %p secret', async (kvp: string, file: boolean, exKey: string, exValue: string, error: Error) => {
+  ])('given %p key and %p secret', async (kvp: string, file: boolean, exKey: string, exValue: string, error: Error | null) => {
     try {
-      const buildx = new Buildx({
-        context: new Context()
-      });
       let secret: string;
       if (file) {
-        secret = buildx.inputs.generateBuildSecretFile(kvp);
+        secret = Inputs.resolveBuildSecretFile(kvp);
       } else {
-        secret = buildx.inputs.generateBuildSecretString(kvp);
+        secret = Inputs.resolveBuildSecretString(kvp);
       }
       expect(secret).toEqual(`id=${exKey},src=${tmpName}`);
       expect(fs.readFileSync(tmpName, 'utf-8')).toEqual(exValue);
@@ -239,6 +221,8 @@ describe('hasDockerExporter', () => {
     [['type=docker', 'type=tar,dest=/tmp/image.tar'], true, undefined],
     [['"type=tar","dest=/tmp/image.tar"'], false, undefined],
     [['" type= local" , dest=./release-out'], false, undefined],
+    [['type=docker'], true, false],
+    [['type=docker'], true, true],
     [['.'], true, true],
   ])('given %p returns %p', async (exporters: Array<string>, expected: boolean, load: boolean | undefined) => {
     expect(Inputs.hasDockerExporter(exporters, load)).toEqual(expected);

__tests__/buildx/install.test.ts

@@ -14,31 +14,43 @@
  * limitations under the License.
  */
 
-import {describe, expect, it, jest, test, beforeEach} from '@jest/globals';
+import {describe, expect, it, jest, test, beforeEach, afterEach} from '@jest/globals';
 import * as fs from 'fs';
 import * as path from 'path';
+import * as rimraf from 'rimraf';
 import osm = require('os');
 
 import {Install} from '../../src/buildx/install';
 
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-jest');
+
 beforeEach(() => {
   jest.clearAllMocks();
 });
 
-describe('install', () => {
-  // prettier-ignore
-  const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-install-jest').split(path.sep).join(path.posix.sep);
+afterEach(function () {
+  rimraf.sync(tmpDir);
+});
 
+describe('download', () => {
   // prettier-ignore
   test.each([
-    ['v0.4.1', false],
+    ['v0.9.1', false],
     ['latest', false],
-    ['v0.4.1', true],
+    ['v0.9.1', true],
     ['latest', true]
   ])(
   'acquires %p of buildx (standalone: %p)', async (version, standalone) => {
       const install = new Install({standalone: standalone});
-      const buildxBin = await install.install(version, tmpDir);
+      const toolPath = await install.download(version);
+      expect(fs.existsSync(toolPath)).toBe(true);
+      let buildxBin: string;
+      if (standalone) {
+        buildxBin = await install.installStandalone(toolPath, tmpDir);
+      } else {
+        buildxBin = await install.installPlugin(toolPath, tmpDir);
+      }
       expect(fs.existsSync(buildxBin)).toBe(true);
     },
     100000
@@ -57,10 +69,10 @@ describe('install', () => {
     ['linux', 's390x'],
   ])(
   'acquires buildx for %s/%s', async (os, arch) => {
-      jest.spyOn(osm, 'platform').mockImplementation(() => os);
+      jest.spyOn(osm, 'platform').mockImplementation(() => os as NodeJS.Platform);
       jest.spyOn(osm, 'arch').mockImplementation(() => arch);
       const install = new Install();
-      const buildxBin = await install.install('latest', tmpDir);
+      const buildxBin = await install.download('latest');
       expect(fs.existsSync(buildxBin)).toBe(true);
     },
     100000
@@ -73,6 +85,26 @@ describe('install', () => {
   });
 });
 
+describe('build', () => {
+  // eslint-disable-next-line jest/no-disabled-tests
+  it.skip('builds refs/pull/648/head', async () => {
+    const install = new Install();
+    const toolPath = await install.build('https://github.com/docker/buildx.git#refs/pull/648/head');
+    expect(fs.existsSync(toolPath)).toBe(true);
+    const buildxBin = await install.installStandalone(toolPath, tmpDir);
+    expect(fs.existsSync(buildxBin)).toBe(true);
+  }, 100000);
+
+  // eslint-disable-next-line jest/no-disabled-tests
+  it.skip('builds 67bd6f4dc82a9cd96f34133dab3f6f7af803bb14', async () => {
+    const install = new Install();
+    const toolPath = await install.build('https://github.com/docker/buildx.git#67bd6f4dc82a9cd96f34133dab3f6f7af803bb14');
+    expect(fs.existsSync(toolPath)).toBe(true);
+    const buildxBin = await install.installPlugin(toolPath, tmpDir);
+    expect(fs.existsSync(buildxBin)).toBe(true);
+  }, 100000);
+});
+
 describe('getRelease', () => {
   it('returns latest buildx GitHub release', async () => {
     const release = await Install.getRelease('latest');
@@ -97,6 +129,6 @@ describe('getRelease', () => {
   });
 
   it('unknown release', async () => {
-    await expect(Install.getRelease('foo')).rejects.toThrowError(new Error('Cannot find Buildx release foo in https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-releases.json'));
+    await expect(Install.getRelease('foo')).rejects.toThrow(new Error('Cannot find Buildx release foo in https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/buildx-releases.json'));
   });
 });

__tests__/context.test.ts

@@ -22,16 +22,17 @@ import {describe, expect, jest, it, beforeEach, afterEach} from '@jest/globals';
 import {Context} from '../src/context';
 
 // prettier-ignore
-const tmpDir = path.join(process.env.TEMP || '/tmp', 'context-jest').split(path.sep).join(path.posix.sep);
-const tmpName = path.join(tmpDir, '.tmpname-jest').split(path.sep).join(path.posix.sep);
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'context-jest');
+const tmpName = path.join(tmpDir, '.tmpname-jest');
 
-jest.spyOn(Context.prototype, 'tmpDir').mockImplementation((): string => {
+jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
   if (!fs.existsSync(tmpDir)) {
     fs.mkdirSync(tmpDir, {recursive: true});
   }
   return tmpDir;
 });
-jest.spyOn(Context.prototype, 'tmpName').mockImplementation((): string => {
+
+jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
   return tmpName;
 });
 
@@ -43,16 +44,20 @@ afterEach(() => {
   rimraf.sync(tmpDir);
 });
 
+describe('gitRef', () => {
+  it('returns refs/heads/master', async () => {
+    expect(Context.gitRef()).toEqual('refs/heads/master');
+  });
+});
+
 describe('gitContext', () => {
   it('returns refs/heads/master', async () => {
-    const context = new Context();
-    expect(context.buildGitContext).toEqual('https://github.com/docker/actions-toolkit.git#refs/heads/master');
+    expect(Context.gitContext()).toEqual('https://github.com/docker/actions-toolkit.git#refs/heads/master');
   });
 });
 
 describe('provenanceBuilderID', () => {
   it('returns 123', async () => {
-    const context = new Context();
-    expect(context.provenanceBuilderID).toEqual('https://github.com/docker/actions-toolkit/actions/runs/123');
+    expect(Context.provenanceBuilderID()).toEqual('https://github.com/docker/actions-toolkit/actions/runs/123');
   });
 });

__tests__/docker/docker.test.ts

@@ -15,11 +15,12 @@
  */
 
 import {afterEach, beforeEach, describe, expect, it, jest} from '@jest/globals';
-import * as exec from '@actions/exec';
 import path from 'path';
+import * as io from '@actions/io';
 import osm = require('os');
 
-import {Docker} from '../src/docker';
+import {Docker} from '../../src/docker/docker';
+import {Exec} from '../../src/exec';
 
 beforeEach(() => {
   jest.clearAllMocks();
@@ -48,55 +49,43 @@ describe('configDir', () => {
 });
 
 describe('isAvailable', () => {
-  it('cli', () => {
-    const execSpy = jest.spyOn(exec, 'getExecOutput');
-    Docker.isAvailable;
-    // eslint-disable-next-line jest/no-standalone-expect
-    expect(execSpy).toHaveBeenCalledWith(`docker`, undefined, {
-      silent: true,
-      ignoreReturnCode: true
+  it('cli', async () => {
+    const ioWhichSpy = jest.spyOn(io, 'which');
+    await Docker.isAvailable();
+    expect(ioWhichSpy).toHaveBeenCalledTimes(1);
+    expect(ioWhichSpy).toHaveBeenCalledWith('docker', true);
+  });
+});
+
+describe('context', () => {
+  it('call docker context show', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    await Docker.context().catch(() => {
+      // noop
+    });
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['context', 'inspect', '--format', '{{.Name}}'], {
+      ignoreReturnCode: true,
+      silent: true
     });
   });
 });
 
 describe('printVersion', () => {
-  it('docker cli', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
-    Docker.printVersion(false).catch(() => {
+  it('call docker version', async () => {
+    const execSpy = jest.spyOn(Exec, 'exec');
+    await Docker.printVersion().catch(() => {
       // noop
     });
-    expect(execSpy).toHaveBeenCalledWith(`docker`, ['version'], {
-      failOnStdErr: false
-    });
-  });
-  it('standalone', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
-    Docker.printVersion(true).catch(() => {
-      // noop
-    });
-    expect(execSpy).not.toHaveBeenCalledWith(`docker`, ['version'], {
-      failOnStdErr: false
-    });
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['version']);
   });
 });
 
 describe('printInfo', () => {
-  it('docker cli', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
-    Docker.printInfo(false).catch(() => {
+  it('call docker info', async () => {
+    const execSpy = jest.spyOn(Exec, 'exec');
+    await Docker.printInfo().catch(() => {
       // noop
     });
-    expect(execSpy).toHaveBeenCalledWith(`docker`, ['info'], {
-      failOnStdErr: false
-    });
-  });
-  it('standalone', () => {
-    const execSpy = jest.spyOn(exec, 'exec');
-    Docker.printInfo(true).catch(() => {
-      // noop
-    });
-    expect(execSpy).not.toHaveBeenCalledWith(`docker`, ['info'], {
-      failOnStdErr: false
-    });
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['info']);
   });
 });

__tests__/docker/install.test.itg.ts

@@ -0,0 +1,44 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import path from 'path';
+import {jest, describe, expect, test} from '@jest/globals';
+
+import {Install} from '../../src/docker/install';
+import {Docker} from '../../src/docker/docker';
+
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'docker-install-jest');
+
+describe('install', () => {
+  jest.retryTimes(2, {logErrorsBeforeRetry: true});
+  // prettier-ignore
+  test.each(['v23.0.0'])(
+    'install docker %s', async (version) => {
+      await expect((async () => {
+        const install = new Install({
+          version: version,
+          runDir: tmpDir,
+          contextName: 'foo'
+        });
+        await install.download();
+        await install.install();
+        await Docker.printVersion();
+        await Docker.printInfo();
+        await install.tearDown();
+      })()).resolves.not.toThrow();
+    });
+});

__tests__/docker/install.test.ts

@@ -0,0 +1,73 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, jest, test, beforeEach, afterEach, it} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as rimraf from 'rimraf';
+import osm = require('os');
+
+import {Install} from '../../src/docker/install';
+
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'docker-install-jest');
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+afterEach(function () {
+  rimraf.sync(tmpDir);
+});
+
+describe('download', () => {
+  // prettier-ignore
+  test.each([
+    ['v19.03.14', 'linux'],
+    ['v20.10.22', 'linux'],
+    ['v20.10.22', 'darwin'],
+    ['v20.10.22', 'win32'],
+  ])(
+  'acquires %p of docker (%s)', async (version, platformOS) => {
+    jest.spyOn(osm, 'platform').mockImplementation(() => platformOS as NodeJS.Platform);
+    const install = new Install({
+      version: version,
+      runDir: tmpDir,
+    });
+    const toolPath = await install.download();
+    expect(fs.existsSync(toolPath)).toBe(true);
+  }, 100000);
+});
+
+describe('getRelease', () => {
+  it('returns latest docker GitHub release', async () => {
+    const release = await Install.getRelease('latest');
+    expect(release).not.toBeNull();
+    expect(release?.tag_name).not.toEqual('');
+  });
+
+  it('returns v23.0.0 buildx GitHub release', async () => {
+    const release = await Install.getRelease('v23.0.0');
+    expect(release).not.toBeNull();
+    expect(release?.id).toEqual(91109643);
+    expect(release?.tag_name).toEqual('v23.0.0');
+    expect(release?.html_url).toEqual('https://github.com/moby/moby/releases/tag/v23.0.0');
+  });
+
+  it('unknown release', async () => {
+    await expect(Install.getRelease('foo')).rejects.toThrow(new Error('Cannot find Docker release foo in https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/docker-releases.json'));
+  });
+});

__tests__/dockerhub.test.ts

@@ -0,0 +1,121 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, jest, it, beforeEach} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+
+import {DockerHub} from '../src/dockerhub';
+import {RepositoryResponse, RepositoryTagsResponse} from '../src/types/dockerhub';
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+import repoInfoFixture from './fixtures/dockerhub-repoinfo.json';
+import repoTagsFixture from './fixtures/dockerhub-repotags.json';
+import repoAllTagsFixture from './fixtures/dockerhub-repoalltags.json';
+
+describe('getRepository', () => {
+  it('returns repo info', async () => {
+    jest.spyOn(DockerHub.prototype, 'getRepository').mockImplementation((): Promise<RepositoryResponse> => {
+      return <Promise<RepositoryResponse>>(repoInfoFixture as unknown);
+    });
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    jest.spyOn(DockerHub as any, 'login').mockReturnValue('jwt_token');
+    const dockerhub = await DockerHub.build({
+      credentials: {
+        username: 'foo',
+        password: '0123456-7890-0000-1111-222222222'
+      }
+    });
+    const repoinfo = await dockerhub.getRepository({
+      namespace: 'foo',
+      name: 'bar'
+    });
+    expect(repoinfo.namespace).toEqual('foo');
+    expect(repoinfo.name).toEqual('bar');
+    expect(repoinfo.repository_type).toEqual('image');
+  });
+});
+
+describe('getRepositoryTags', () => {
+  it('return repo tags', async () => {
+    jest.spyOn(DockerHub.prototype, 'getRepositoryTags').mockImplementation((): Promise<RepositoryTagsResponse> => {
+      return <Promise<RepositoryTagsResponse>>(repoTagsFixture as unknown);
+    });
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    jest.spyOn(DockerHub as any, 'login').mockReturnValue('jwt_token');
+    const dockerhub = await DockerHub.build({
+      credentials: {
+        username: 'foo',
+        password: '0123456-7890-0000-1111-222222222'
+      }
+    });
+    const resp = await dockerhub.getRepositoryTags({
+      namespace: 'crazymax',
+      name: 'diun'
+    });
+    expect(resp.count).toBeGreaterThan(0);
+    expect(resp.next).not.toBeNull();
+    expect(resp.results.length).toBeGreaterThan(0);
+    expect(resp.results[0].last_updater_username).toEqual('crazymax');
+  });
+});
+
+describe('getRepositoryAllTags', () => {
+  it('return repo all tags', async () => {
+    jest.spyOn(DockerHub.prototype, 'getRepositoryAllTags').mockImplementation((): Promise<RepositoryTagsResponse> => {
+      return <Promise<RepositoryTagsResponse>>(repoAllTagsFixture as unknown);
+    });
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    jest.spyOn(DockerHub as any, 'login').mockReturnValue('jwt_token');
+    const dockerhub = await DockerHub.build({
+      credentials: {
+        username: 'foo',
+        password: '0123456-7890-0000-1111-222222222'
+      }
+    });
+    const resp = await dockerhub.getRepositoryAllTags({
+      namespace: 'crazymax',
+      name: 'diun'
+    });
+    expect(resp.count).toBeGreaterThan(0);
+    expect(resp.next).toBeNull();
+    expect(resp.results.length).toBeGreaterThan(0);
+    expect(resp.results[0].last_updater_username).toEqual('crazymax');
+  });
+});
+
+describe('updateRepoDescription', () => {
+  it.skip('set repo description', async () => {
+    const dockerhub = await DockerHub.build({
+      credentials: {
+        username: 'foo',
+        password: 'bar'
+      }
+    });
+    const resp = await dockerhub.updateRepoDescription({
+      namespace: 'crazymax',
+      name: 'test-toolkit',
+      description: 'Hello-World',
+      full_description: fs.readFileSync(path.join(__dirname, '..', 'README.md'), 'utf-8')
+    });
+    expect(resp.namespace).toEqual('foo');
+    expect(resp.name).toEqual('bar');
+    expect(resp.description).toEqual('Hello-World');
+  });
+});

__tests__/exec.test.ts

@@ -0,0 +1,51 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {beforeEach, describe, expect, it, jest} from '@jest/globals';
+
+import {Exec} from '../src/exec';
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+describe('exec', () => {
+  it('returns docker version', async () => {
+    const execSpy = jest.spyOn(Exec, 'exec');
+    await Exec.exec('docker', ['version'], {
+      ignoreReturnCode: true,
+      silent: true
+    });
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['version'], {
+      ignoreReturnCode: true,
+      silent: true
+    });
+  });
+});
+
+describe('getExecOutput', () => {
+  it('returns docker version', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    await Exec.getExecOutput('docker', ['version'], {
+      ignoreReturnCode: true,
+      silent: true
+    });
+    expect(execSpy).toHaveBeenCalledWith(`docker`, ['version'], {
+      ignoreReturnCode: true,
+      silent: true
+    });
+  });
+});

__tests__/fixtures/bake-01-overrides.json

@@ -0,0 +1,29 @@
+{
+  "group": {
+    "default": {
+      "targets": [
+        "image"
+      ]
+    }
+  },
+  "target": {
+    "image": {
+      "context": ".",
+      "dockerfile": "Dockerfile",
+      "args": {
+        "BUILDKIT_CONTEXT_KEEP_GIT_DIR": "1",
+        "GO_VERSION": "1.20"
+      },
+      "tags": [
+        "docker/buildx-bin:local"
+      ],
+      "target": "binaries",
+      "platforms": [
+        "linux/amd64"
+      ],
+      "output": [
+        "type=docker"
+      ]
+    }
+  }
+}

__tests__/fixtures/bake-01-validate.json

@@ -0,0 +1,55 @@
+{
+  "group": {
+    "default": {
+      "targets": [
+        "validate"
+      ]
+    },
+    "validate": {
+      "targets": [
+        "lint",
+        "validate-vendor",
+        "validate-docs"
+      ]
+    }
+  },
+  "target": {
+    "lint": {
+      "context": ".",
+      "dockerfile": "./hack/dockerfiles/lint.Dockerfile",
+      "args": {
+        "BUILDKIT_CONTEXT_KEEP_GIT_DIR": "1",
+        "GO_VERSION": "1.20"
+      },
+      "output": [
+        "type=cacheonly"
+      ]
+    },
+    "validate-docs": {
+      "context": ".",
+      "dockerfile": "./hack/dockerfiles/docs.Dockerfile",
+      "args": {
+        "BUILDKIT_CONTEXT_KEEP_GIT_DIR": "1",
+        "BUILDX_EXPERIMENTAL": "1",
+        "FORMATS": "md",
+        "GO_VERSION": "1.20"
+      },
+      "target": "validate",
+      "output": [
+        "type=cacheonly"
+      ]
+    },
+    "validate-vendor": {
+      "context": ".",
+      "dockerfile": "./hack/dockerfiles/vendor.Dockerfile",
+      "args": {
+        "BUILDKIT_CONTEXT_KEEP_GIT_DIR": "1",
+        "GO_VERSION": "1.20"
+      },
+      "target": "validate",
+      "output": [
+        "type=cacheonly"
+      ]
+    }
+  }
+}

__tests__/fixtures/bake-01.hcl

@@ -0,0 +1,172 @@
+// Copyright 2023 actions-toolkit authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+variable "GO_VERSION" {
+  default = "1.20"
+}
+variable "DOCS_FORMATS" {
+  default = "md"
+}
+variable "DESTDIR" {
+  default = "./bin"
+}
+
+# Special target: https://github.com/docker/metadata-action#bake-definition
+target "meta-helper" {
+  tags = ["docker/buildx-bin:local"]
+}
+
+target "_common" {
+  args = {
+    GO_VERSION = GO_VERSION
+    BUILDKIT_CONTEXT_KEEP_GIT_DIR = 1
+  }
+}
+
+group "default" {
+  targets = ["binaries"]
+}
+
+group "validate" {
+  targets = ["lint", "validate-vendor", "validate-docs"]
+}
+
+target "lint" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/lint.Dockerfile"
+  output = ["type=cacheonly"]
+}
+
+target "validate-vendor" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/vendor.Dockerfile"
+  target = "validate"
+  output = ["type=cacheonly"]
+}
+
+target "validate-docs" {
+  inherits = ["_common"]
+  args = {
+    FORMATS = DOCS_FORMATS
+    BUILDX_EXPERIMENTAL = 1 // enables experimental cmds/flags for docs generation
+  }
+  dockerfile = "./hack/dockerfiles/docs.Dockerfile"
+  target = "validate"
+  output = ["type=cacheonly"]
+}
+
+target "validate-authors" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/authors.Dockerfile"
+  target = "validate"
+  output = ["type=cacheonly"]
+}
+
+target "validate-generated-files" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/generated-files.Dockerfile"
+  target = "validate"
+  output = ["type=cacheonly"]
+}
+
+target "update-vendor" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/vendor.Dockerfile"
+  target = "update"
+  output = ["."]
+}
+
+target "update-docs" {
+  inherits = ["_common"]
+  args = {
+    FORMATS = DOCS_FORMATS
+    BUILDX_EXPERIMENTAL = 1 // enables experimental cmds/flags for docs generation
+  }
+  dockerfile = "./hack/dockerfiles/docs.Dockerfile"
+  target = "update"
+  output = ["./docs/reference"]
+}
+
+target "update-authors" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/authors.Dockerfile"
+  target = "update"
+  output = ["."]
+}
+
+target "update-generated-files" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/generated-files.Dockerfile"
+  target = "update"
+  output = ["."]
+}
+
+target "mod-outdated" {
+  inherits = ["_common"]
+  dockerfile = "./hack/dockerfiles/vendor.Dockerfile"
+  target = "outdated"
+  no-cache-filter = ["outdated"]
+  output = ["type=cacheonly"]
+}
+
+target "test" {
+  inherits = ["_common"]
+  target = "test-coverage"
+  output = ["${DESTDIR}/coverage"]
+}
+
+target "binaries" {
+  inherits = ["_common"]
+  target = "binaries"
+  output = ["${DESTDIR}/build"]
+  platforms = ["local"]
+}
+
+target "binaries-cross" {
+  inherits = ["binaries"]
+  platforms = [
+    "darwin/amd64",
+    "darwin/arm64",
+    "linux/amd64",
+    "linux/arm/v6",
+    "linux/arm/v7",
+    "linux/arm64",
+    "linux/ppc64le",
+    "linux/riscv64",
+    "linux/s390x",
+    "windows/amd64",
+    "windows/arm64"
+  ]
+}
+
+target "release" {
+  inherits = ["binaries-cross"]
+  target = "release"
+  output = ["${DESTDIR}/release"]
+}
+
+target "image" {
+  inherits = ["meta-helper", "binaries"]
+  output = ["type=image"]
+}
+
+target "image-cross" {
+  inherits = ["meta-helper", "binaries-cross"]
+  output = ["type=image"]
+}
+
+target "image-local" {
+  inherits = ["image"]
+  output = ["type=docker"]
+}

__tests__/fixtures/bake-02-build.json

@@ -0,0 +1,20 @@
+{
+  "group": {
+    "default": {
+      "targets": [
+        "build"
+      ]
+    }
+  },
+  "target": {
+    "build": {
+      "context": ".",
+      "dockerfile": "Dockerfile",
+      "args": {
+        "BUILDKIT_CONTEXT_KEEP_GIT_DIR": "1",
+        "GO_VERSION": "1.20"
+      },
+      "target": "build"
+    }
+  }
+}

__tests__/fixtures/bake-02.hcl

@@ -0,0 +1,33 @@
+// Copyright 2023 actions-toolkit authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+variable "GO_VERSION" {
+  default = "1.20"
+}
+
+target "_common" {
+  args = {
+    GO_VERSION = GO_VERSION
+    BUILDKIT_CONTEXT_KEEP_GIT_DIR = 1
+  }
+}
+
+group "default" {
+  targets = ["build"]
+}
+
+target "build" {
+  inherits = ["_common"]
+  target = "build"
+}

__tests__/fixtures/bake-buildx-0.10.4-binaries-cross.json

@@ -0,0 +1,36 @@
+{
+  "group": {
+    "default": {
+      "targets": [
+        "binaries-cross"
+      ]
+    }
+  },
+  "target": {
+    "binaries-cross": {
+      "context": "https://github.com/docker/buildx.git#v0.10.4",
+      "dockerfile": "Dockerfile",
+      "args": {
+        "BUILDKIT_CONTEXT_KEEP_GIT_DIR": "1",
+        "GO_VERSION": "1.19"
+      },
+      "target": "binaries",
+      "platforms": [
+        "darwin/amd64",
+        "darwin/arm64",
+        "linux/amd64",
+        "linux/arm/v6",
+        "linux/arm/v7",
+        "linux/arm64",
+        "linux/ppc64le",
+        "linux/riscv64",
+        "linux/s390x",
+        "windows/amd64",
+        "windows/arm64"
+      ],
+      "output": [
+        "./bin/build"
+      ]
+    }
+  }
+}

__tests__/fixtures/dockerhub-repoinfo.json

@@ -0,0 +1,34 @@
+{
+    "user": "foo",
+    "name": "bar",
+    "namespace": "foo",
+    "repository_type": "image",
+    "status": 1,
+    "status_description": "active",
+    "description": "Bar",
+    "is_private": false,
+    "is_automated": false,
+    "can_edit": true,
+    "star_count": 68,
+    "pull_count": 178255909,
+    "last_updated": "2023-02-02T14:22:31.184404Z",
+    "date_registered": "2019-06-04T20:08:57.306333Z",
+    "collaborator_count": 0,
+    "affiliation": "owner",
+    "hub_user": "foo",
+    "has_starred": false,
+    "full_description": "This is the full description of the repo.",
+    "permissions": {
+        "read": true,
+        "write": true,
+        "admin": true
+    },
+    "media_types": [
+        "application/vnd.docker.container.image.v1+json",
+        "application/vnd.docker.distribution.manifest.list.v2+json",
+        "application/vnd.oci.image.index.v1+json"
+    ],
+    "content_types": [
+        "image"
+    ]
+}

__tests__/fixtures/inspect7.txt

@@ -5,7 +5,7 @@ Last Activity: 2023-01-16 09:45:23 +0000 UTC
 Nodes:
 Name:           builder20
 Endpoint:       unix:///var/run/docker.sock
-Driver Options: env.BUILDKIT_STEP_LOG_MAX_SIZE="10485760" env.BUILDKIT_STEP_LOG_MAX_SPEED="10485760" env.JAEGER_TRACE="localhost:6831" image="moby/buildkit:latest" network="host"
+Driver Options: env.BUILDKIT_STEP_LOG_MAX_SIZE="10485760" env.BUILDKIT_STEP_LOG_MAX_SPEED="10485760" env.JAEGER_TRACE="localhost:6831" image="moby/buildkit:latest" network="host" qemu.install="true"
 Status:         running
 Flags:          --debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host
 Buildkit:       v0.11.0

__tests__/git.test.ts

@@ -17,18 +17,131 @@
 import {beforeEach, describe, expect, it, jest} from '@jest/globals';
 
 import {Git} from '../src/git';
+import {Exec} from '../src/exec';
+import {ExecOutput} from '@actions/exec';
 
 beforeEach(() => {
   jest.clearAllMocks();
+  jest.restoreAllMocks();
 });
 
-describe('git', () => {
-  it('returns git remote ref', async () => {
-    try {
-      expect(await Git.getRemoteSha('https://github.com/docker/buildx.git', 'refs/pull/648/head')).toEqual('f11797113e5a9b86bd976329c5dbb8a8bfdfadfa');
-    } catch (e) {
-      // eslint-disable-next-line jest/no-conditional-expect
-      expect(e).toEqual(null);
-    }
+describe('context', () => {
+  it('returns mocked ref and sha', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git show --format=%H HEAD --quiet --':
+          result = 'test-sha';
+          break;
+        case 'git symbolic-ref HEAD':
+          result = 'refs/heads/test';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+    const ctx = await Git.context();
+    expect(ctx.ref).toEqual('refs/heads/test');
+    expect(ctx.sha).toEqual('test-sha');
+  });
+});
+
+describe('isInsideWorkTree', () => {
+  it('have been called', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    try {
+      await Git.isInsideWorkTree();
+    } catch (err) {
+      // noop
+    }
+    expect(execSpy).toHaveBeenCalledWith(`git`, ['rev-parse', '--is-inside-work-tree'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+});
+
+describe('remoteSha', () => {
+  it('returns git remote sha', async () => {
+    expect(await Git.remoteSha('https://github.com/docker/buildx.git', 'refs/pull/648/head')).toEqual('f11797113e5a9b86bd976329c5dbb8a8bfdfadfa');
+  });
+});
+
+describe('remoteURL', () => {
+  it('have been called', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    try {
+      await Git.remoteURL();
+    } catch (err) {
+      // noop
+    }
+    expect(execSpy).toHaveBeenCalledWith(`git`, ['remote', 'get-url', 'origin'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+});
+
+describe('ref', () => {
+  it('have been called', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    try {
+      await Git.ref();
+    } catch (err) {
+      // noop
+    }
+    expect(execSpy).toHaveBeenCalledWith(`git`, ['symbolic-ref', 'HEAD'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+});
+
+describe('fullCommit', () => {
+  it('have been called', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    try {
+      await Git.fullCommit();
+    } catch (err) {
+      // noop
+    }
+    expect(execSpy).toHaveBeenCalledWith(`git`, ['show', '--format=%H', 'HEAD', '--quiet', '--'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+});
+
+describe('shortCommit', () => {
+  it('have been called', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    try {
+      await Git.shortCommit();
+    } catch (err) {
+      // noop
+    }
+    expect(execSpy).toHaveBeenCalledWith(`git`, ['show', '--format=%h', 'HEAD', '--quiet', '--'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
+  });
+});
+
+describe('tag', () => {
+  it('have been called', async () => {
+    const execSpy = jest.spyOn(Exec, 'getExecOutput');
+    try {
+      await Git.tag();
+    } catch (err) {
+      // noop
+    }
+    expect(execSpy).toHaveBeenCalledWith(`git`, ['tag', '--points-at', 'HEAD', '--sort', '-version:creatordate'], {
+      silent: true,
+      ignoreReturnCode: true
+    });
   });
 });

__tests__/github.test.ts

@@ -17,6 +17,7 @@
 import {describe, expect, jest, it, beforeEach, afterEach} from '@jest/globals';
 import * as fs from 'fs';
 import * as path from 'path';
+import * as core from '@actions/core';
 
 import {GitHub} from '../src/github';
 import {GitHubRepo} from '../src/types/github';
@@ -25,7 +26,7 @@ beforeEach(() => {
   jest.clearAllMocks();
 });
 
-import repoFixture from './fixtures/repo.json';
+import repoFixture from './fixtures/github-repo.json';
 jest.spyOn(GitHub.prototype, 'repoData').mockImplementation((): Promise<GitHubRepo> => {
   return <Promise<GitHubRepo>>(repoFixture as unknown);
 });
@@ -101,12 +102,46 @@ describe('actionsRuntimeToken', () => {
   });
   it('empty', async () => {
     process.env.ACTIONS_RUNTIME_TOKEN = '';
-    expect(GitHub.actionsRuntimeToken).toEqual({});
+    expect(GitHub.actionsRuntimeToken).toBeUndefined();
+  });
+  it('malformed', async () => {
+    process.env.ACTIONS_RUNTIME_TOKEN = 'foo';
+    expect(() => {
+      GitHub.actionsRuntimeToken;
+    }).toThrow();
   });
   it('fixture', async () => {
     process.env.ACTIONS_RUNTIME_TOKEN = fs.readFileSync(path.join(__dirname, 'fixtures', 'runtimeToken.txt')).toString().trim();
     const runtimeToken = GitHub.actionsRuntimeToken;
-    expect(runtimeToken.ac).toEqual('[{"Scope":"refs/heads/master","Permission":3}]');
-    expect(runtimeToken.iss).toEqual('vstoken.actions.githubusercontent.com');
+    expect(runtimeToken?.ac).toEqual('[{"Scope":"refs/heads/master","Permission":3}]');
+    expect(runtimeToken?.iss).toEqual('vstoken.actions.githubusercontent.com');
+  });
+});
+
+describe('printActionsRuntimeTokenACs', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+  it('empty', async () => {
+    process.env.ACTIONS_RUNTIME_TOKEN = '';
+    await expect(GitHub.printActionsRuntimeTokenACs()).rejects.toThrow(new Error('ACTIONS_RUNTIME_TOKEN not set'));
+  });
+  it('malformed', async () => {
+    process.env.ACTIONS_RUNTIME_TOKEN = 'foo';
+    await expect(GitHub.printActionsRuntimeTokenACs()).rejects.toThrow(new Error("Cannot parse GitHub Actions Runtime Token: Invalid token specified: Cannot read properties of undefined (reading 'replace')"));
+  });
+  it('refs/heads/master', async () => {
+    const infoSpy = jest.spyOn(core, 'info');
+    process.env.ACTIONS_RUNTIME_TOKEN = fs.readFileSync(path.join(__dirname, 'fixtures', 'runtimeToken.txt')).toString().trim();
+    await GitHub.printActionsRuntimeTokenACs();
+    expect(infoSpy).toHaveBeenCalledTimes(1);
+    expect(infoSpy).toHaveBeenCalledWith(`refs/heads/master: read/write`);
   });
 });

__tests__/util.test.ts

@@ -69,16 +69,28 @@ describe('getInputList', () => {
 
   it('multiline and ignoring comma correctly', async () => {
     setInput('cache-from', 'user/app:cache\ntype=local,src=path/to/dir');
-    const res = Util.getInputList('cache-from', true);
+    const res = Util.getInputList('cache-from', {ignoreComma: true});
     expect(res).toEqual(['user/app:cache', 'type=local,src=path/to/dir']);
   });
 
   it('different new lines and ignoring comma correctly', async () => {
     setInput('cache-from', 'user/app:cache\r\ntype=local,src=path/to/dir');
-    const res = Util.getInputList('cache-from', true);
+    const res = Util.getInputList('cache-from', {ignoreComma: true});
     expect(res).toEqual(['user/app:cache', 'type=local,src=path/to/dir']);
   });
 
+  it('do not escape surrounding quotes', async () => {
+    setInput('driver-opts', `"env.no_proxy=localhost,127.0.0.1,.mydomain"`);
+    const res = Util.getInputList('driver-opts', {ignoreComma: true, quote: false});
+    expect(res).toEqual(['"env.no_proxy=localhost,127.0.0.1,.mydomain"']);
+  });
+
+  it('escape surrounding quotes', async () => {
+    setInput('platforms', 'linux/amd64\n"linux/arm64,linux/arm/v7"');
+    const res = Util.getInputList('platforms');
+    expect(res).toEqual(['linux/amd64', 'linux/arm64', 'linux/arm/v7']);
+  });
+
   it('multiline values', async () => {
     setInput(
       'secrets',
@@ -88,7 +100,7 @@ bbbbbbb
 ccccccccc"
 FOO=bar`
     );
-    const res = Util.getInputList('secrets', true);
+    const res = Util.getInputList('secrets', {ignoreComma: true});
     expect(res).toEqual([
       'GIT_AUTH_TOKEN=abcdefgh,ijklmno=0123456789',
       `MYSECRET=aaaaaaaa
@@ -111,7 +123,7 @@ FOO=bar
 bbbb
 ccc"`
     );
-    const res = Util.getInputList('secrets', true);
+    const res = Util.getInputList('secrets', {ignoreComma: true});
     expect(res).toEqual([
       'GIT_AUTH_TOKEN=abcdefgh,ijklmno=0123456789',
       `MYSECRET=aaaaaaaa
@@ -134,7 +146,7 @@ bbbbbbb
 ccccccccc
 FOO=bar`
     );
-    const res = Util.getInputList('secrets', true);
+    const res = Util.getInputList('secrets', {ignoreComma: true});
     expect(res).toEqual(['GIT_AUTH_TOKEN=abcdefgh,ijklmno=0123456789', 'MYSECRET=aaaaaaaa', 'bbbbbbb', 'ccccccccc', 'FOO=bar']);
   });
 
@@ -145,7 +157,7 @@ FOO=bar`
       `"GPG_KEY=${pgp}"
 FOO=bar`
     );
-    const res = Util.getInputList('secrets', true);
+    const res = Util.getInputList('secrets', {ignoreComma: true});
     expect(res).toEqual([`GPG_KEY=${pgp}`, 'FOO=bar']);
   });
 
@@ -158,7 +170,7 @@ bbbb""bbb
 ccccccccc"
 FOO=bar`
     );
-    const res = Util.getInputList('secrets', true);
+    const res = Util.getInputList('secrets', {ignoreComma: true});
     expect(res).toEqual([
       'GIT_AUTH_TOKEN=abcdefgh,ijklmno=0123456789',
       `MYSECRET=aaaaaaaa
@@ -182,13 +194,29 @@ describe('asyncForEach', () => {
   });
 });
 
-describe('isValidUrl', () => {
+describe('isValidURL', () => {
   test.each([
     ['https://github.com/docker/buildx.git', true],
     ['https://github.com/docker/buildx.git#refs/pull/648/head', true],
+    ['git@github.com:moby/buildkit.git', false],
+    ['git://github.com/user/repo.git', false],
+    ['github.com/moby/buildkit.git#main', false],
     ['v0.4.1', false]
   ])('given %p', async (url, expected) => {
-    expect(Util.isValidUrl(url)).toEqual(expected);
+    expect(Util.isValidURL(url)).toEqual(expected);
+  });
+});
+
+describe('isValidRef', () => {
+  test.each([
+    ['https://github.com/docker/buildx.git', true],
+    ['https://github.com/docker/buildx.git#refs/pull/648/head', true],
+    ['git@github.com:moby/buildkit.git', true],
+    ['git://github.com/user/repo.git', true],
+    ['github.com/moby/buildkit.git#main', true],
+    ['v0.4.1', false]
+  ])('given %p', async (url, expected) => {
+    expect(Util.isValidRef(url)).toEqual(expected);
   });
 });
 

dev.Dockerfile

@@ -79,7 +79,7 @@ RUN --mount=type=bind,target=.,rw \
     --mount=type=bind,from=buildx,source=/buildx,target=/usr/libexec/docker/cli-plugins/docker-buildx \
     --mount=type=bind,from=buildx,source=/buildx,target=/usr/bin/buildx \
     --mount=type=secret,id=GITHUB_TOKEN \
-  GITHUB_TOKEN=$(cat /run/secrets/GITHUB_TOKEN) yarn run test-coverage --coverageDirectory=/tmp/coverage
+  GITHUB_TOKEN=$(cat /run/secrets/GITHUB_TOKEN) yarn run test:coverage --coverageDirectory=/tmp/coverage
 
 FROM scratch AS test-coverage
 COPY --from=test /tmp/coverage /

hack/dockerfiles/license.Dockerfile

@@ -16,7 +16,7 @@
 
 ARG LICENSE_HOLDER="actions-toolkit authors"
 ARG LICENSE_TYPE="apache"
-ARG LICENSE_FILES=".*\(Dockerfile\|Makefile\|\.js\|\.ts\|\.hcl\|\.sh\)"
+ARG LICENSE_FILES=".*\(Dockerfile\|Makefile\|\.js\|\.ts\|\.hcl\|\.sh|\.ps1\)"
 ARG ADDLICENSE_VERSION="v1.0.0"
 
 FROM ghcr.io/google/addlicense:${ADDLICENSE_VERSION} AS addlicense

jest.config.itg.ts

@@ -0,0 +1,31 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+module.exports = {
+  clearMocks: true,
+  testEnvironment: 'node',
+  moduleFileExtensions: ['js', 'ts'],
+  setupFiles: ['dotenv/config'],
+  testMatch: ['**/*.test.itg.ts'],
+  testTimeout: 1800000, // 30 minutes
+  transform: {
+    '^.+\\.ts$': 'ts-jest'
+  },
+  moduleNameMapper: {
+    '^csv-parse/sync': '<rootDir>/node_modules/csv-parse/dist/cjs/sync.cjs'
+  },
+  verbose: false
+};

jest.config.ts

@@ -18,13 +18,13 @@ import fs from 'fs';
 import os from 'os';
 import path from 'path';
 
-const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'docker-actions-toolkit-')).split(path.sep).join(path.posix.sep);
+const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'docker-actions-toolkit-'));
 
 process.env = Object.assign({}, process.env, {
   TEMP: tmpDir,
   GITHUB_REPOSITORY: 'docker/actions-toolkit',
-  RUNNER_TEMP: path.join(tmpDir, 'runner-temp').split(path.sep).join(path.posix.sep),
-  RUNNER_TOOL_CACHE: path.join(tmpDir, 'runner-tool-cache').split(path.sep).join(path.posix.sep)
+  RUNNER_TEMP: path.join(tmpDir, 'runner-temp'),
+  RUNNER_TOOL_CACHE: path.join(tmpDir, 'runner-tool-cache')
 }) as {
   [key: string]: string;
 };
@@ -41,7 +41,7 @@ module.exports = {
   moduleNameMapper: {
     '^csv-parse/sync': '<rootDir>/node_modules/csv-parse/dist/cjs/sync.cjs'
   },
-  collectCoverageFrom: ['src/**/{!(toolkit.ts),}.ts'],
+  collectCoverageFrom: ['src/**/{!(index.ts),}.ts'],
   coveragePathIgnorePatterns: ['lib/', 'node_modules/', '__mocks__/', '__tests__/'],
   verbose: true
 };

package.json

@@ -1,5 +1,6 @@
 {
   "name": "@docker/actions-toolkit",
+  "version": "0.0.0+unknown",
   "description": "Toolkit for Docker (GitHub) Actions",
   "scripts": {
     "build": "tsc",
@@ -10,7 +11,10 @@
     "prettier": "prettier --check \"./**/*.ts\"",
     "prettier:fix": "prettier --write \"./**/*.ts\"",
     "test": "jest",
-    "test-coverage": "jest --coverage"
+    "test:coverage": "jest --coverage",
+    "test:itg": "jest -c jest.config.itg.ts --runInBand --detectOpenHandles",
+    "test:itg-list": "jest -c jest.config.itg.ts --listTests",
+    "test:itg-coverage": "jest --coverage -c jest.config.itg.ts --runInBand --detectOpenHandles"
   },
   "repository": {
     "type": "git",
@@ -27,8 +31,8 @@
   "author": "Docker Inc.",
   "license": "Apache-2.0",
   "packageManager": "yarn@3.3.1",
-  "main": "lib/toolkit.js",
-  "types": "lib/toolkit.d.ts",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
   "directories": {
     "lib": "lib",
     "test": "__tests__"
@@ -45,31 +49,34 @@
     "@actions/exec": "^1.1.1",
     "@actions/github": "^5.1.1",
     "@actions/http-client": "^2.0.1",
+    "@actions/io": "^1.1.2",
     "@actions/tool-cache": "^2.0.1",
-    "csv-parse": "^5.3.4",
+    "async-retry": "^1.3.3",
+    "csv-parse": "^5.3.8",
+    "handlebars": "^4.7.7",
     "jwt-decode": "^3.1.2",
-    "semver": "^7.3.8",
+    "semver": "^7.5.0",
     "tmp": "^0.2.1"
   },
   "devDependencies": {
     "@types/csv-parse": "^1.2.2",
-    "@types/node": "^16.18.11",
+    "@types/node": "^16.18.21",
     "@types/semver": "^7.3.13",
     "@types/tmp": "^0.2.3",
-    "@typescript-eslint/eslint-plugin": "^5.49.0",
-    "@typescript-eslint/parser": "^5.49.0",
+    "@typescript-eslint/eslint-plugin": "^5.56.0",
+    "@typescript-eslint/parser": "^5.56.0",
     "cpy-cli": "^4.2.0",
     "dotenv": "^16.0.3",
-    "eslint": "^8.33.0",
-    "eslint-config-prettier": "^8.6.0",
+    "eslint": "^8.36.0",
+    "eslint-config-prettier": "^8.8.0",
     "eslint-plugin-import": "^2.27.5",
-    "eslint-plugin-jest": "^26.9.0",
+    "eslint-plugin-jest": "^27.2.1",
     "eslint-plugin-prettier": "^4.2.1",
-    "jest": "^27.5.1",
-    "prettier": "^2.8.3",
-    "rimraf": "^4.1.2",
-    "ts-jest": "^27.1.5",
+    "jest": "^29.5.0",
+    "prettier": "^2.8.7",
+    "rimraf": "^4.4.1",
+    "ts-jest": "^29.0.5",
     "ts-node": "^10.9.1",
-    "typescript": "^4.9.4"
+    "typescript": "^4.9.5"
   }
 }

src/buildkit/buildkit.ts

@@ -15,95 +15,82 @@
  */
 
 import * as core from '@actions/core';
-import * as exec from '@actions/exec';
 import * as semver from 'semver';
 
-import {Context} from '../context';
 import {Buildx} from '../buildx/buildx';
 import {Builder} from '../buildx/builder';
 import {Config} from './config';
+import {Exec} from '../exec';
 
-import {BuilderInfo} from '../types/builder';
+import {BuilderInfo, NodeInfo} from '../types/builder';
 
 export interface BuildKitOpts {
-  context: Context;
   buildx?: Buildx;
 }
 
 export class BuildKit {
-  private readonly context: Context;
   private readonly buildx: Buildx;
-  private containerNamePrefix = 'buildx_buildkit_';
 
   public readonly config: Config;
 
-  constructor(opts: BuildKitOpts) {
-    this.context = opts.context;
-    this.config = new Config(this.context);
-    this.buildx =
-      opts?.buildx ||
-      new Buildx({
-        context: this.context
-      });
+  constructor(opts?: BuildKitOpts) {
+    this.config = new Config();
+    this.buildx = opts?.buildx || new Buildx();
   }
 
-  public async getVersion(builderName: string): Promise<string | undefined> {
-    const builderInfo = await this.getBuilderInfo(builderName);
-    if (builderInfo.nodes.length == 0) {
-      // a builder always have on node, should not happen.
-      return undefined;
-    }
-    // TODO: get version for all nodes
-    const node = builderInfo.nodes[0];
-    if (!node.buildkitVersion && node.name) {
+  public async getVersion(node: NodeInfo): Promise<string | undefined> {
+    if (!node.buildkit && node.name) {
       try {
         return await this.getVersionWithinImage(node.name);
       } catch (e) {
         core.warning(e);
       }
     }
-    return node.buildkitVersion;
+    return node.buildkit;
   }
 
   private async getVersionWithinImage(nodeName: string): Promise<string> {
-    return exec
-      .getExecOutput(`docker`, ['inspect', '--format', '{{.Config.Image}}', `${this.containerNamePrefix}${nodeName}`], {
-        ignoreReturnCode: true,
-        silent: true
-      })
-      .then(bkitimage => {
-        if (bkitimage.exitCode == 0 && bkitimage.stdout.length > 0) {
-          return exec
-            .getExecOutput(`docker`, ['run', '--rm', bkitimage.stdout.trim(), '--version'], {
-              ignoreReturnCode: true,
-              silent: true
-            })
-            .then(bkitversion => {
-              if (bkitversion.exitCode == 0 && bkitversion.stdout.length > 0) {
-                return `${bkitimage.stdout.trim()} => ${bkitversion.stdout.trim()}`;
-              } else if (bkitversion.stderr.length > 0) {
-                throw new Error(bkitimage.stderr.trim());
-              }
-              return bkitversion.stdout.trim();
-            });
-        } else if (bkitimage.stderr.length > 0) {
-          throw new Error(bkitimage.stderr.trim());
-        }
-        return bkitimage.stdout.trim();
-      });
+    core.debug(`BuildKit.getVersionWithinImage nodeName: ${nodeName}`);
+    return Exec.getExecOutput(`docker`, ['inspect', '--format', '{{.Config.Image}}', `${Buildx.containerNamePrefix}${nodeName}`], {
+      ignoreReturnCode: true,
+      silent: true
+    }).then(bkitimage => {
+      if (bkitimage.exitCode == 0 && bkitimage.stdout.length > 0) {
+        core.debug(`BuildKit.getVersionWithinImage image: ${bkitimage.stdout.trim()}`);
+        return Exec.getExecOutput(`docker`, ['run', '--rm', bkitimage.stdout.trim(), '--version'], {
+          ignoreReturnCode: true,
+          silent: true
+        }).then(bkitversion => {
+          if (bkitversion.exitCode == 0 && bkitversion.stdout.length > 0) {
+            return `${bkitimage.stdout.trim()} => ${bkitversion.stdout.trim()}`;
+          } else if (bkitversion.stderr.length > 0) {
+            throw new Error(bkitimage.stderr.trim());
+          }
+          return bkitversion.stdout.trim();
+        });
+      } else if (bkitimage.stderr.length > 0) {
+        throw new Error(bkitimage.stderr.trim());
+      }
+      return bkitimage.stdout.trim();
+    });
   }
 
-  public async versionSatisfies(builderName: string, range: string): Promise<boolean> {
-    const builderInfo = await this.getBuilderInfo(builderName);
+  public async versionSatisfies(builderName: string, range: string, builderInfo?: BuilderInfo): Promise<boolean> {
+    if (!builderInfo) {
+      builderInfo = await new Builder({buildx: this.buildx}).inspect(builderName);
+    }
     for (const node of builderInfo.nodes) {
-      let bkversion = node.buildkitVersion;
+      let bkversion = node.buildkit;
+      core.debug(`BuildKit.versionSatisfies ${bkversion}: ${range}`);
       if (!bkversion) {
         try {
           bkversion = await this.getVersionWithinImage(node.name || '');
         } catch (e) {
+          core.debug(`BuildKit.versionSatisfies ${node.name}: can't get version`);
           return false;
         }
       }
+      core.debug(`BuildKit.versionSatisfies ${node.name}: version ${bkversion}`);
       // BuildKit version reported by moby is in the format of `v0.11.0-moby`
       if (builderInfo.driver == 'docker' && !bkversion.endsWith('-moby')) {
         return false;
@@ -114,12 +101,4 @@ export class BuildKit {
     }
     return true;
   }
-
-  private async getBuilderInfo(name: string): Promise<BuilderInfo> {
-    const builder = new Builder({
-      context: this.context,
-      buildx: this.buildx
-    });
-    return builder.inspect(name);
-  }
 }

src/buildkit/config.ts

@@ -19,28 +19,22 @@ import fs from 'fs';
 import {Context} from '../context';
 
 export class Config {
-  private readonly context: Context;
-
-  constructor(context: Context) {
-    this.context = context;
+  public resolveFromString(s: string): string {
+    return this.resolve(s, false);
   }
 
-  public generateFromString(s: string): string {
-    return this.generate(s, false);
+  public resolveFromFile(s: string): string {
+    return this.resolve(s, true);
   }
 
-  public generateFromFile(s: string): string {
-    return this.generate(s, true);
-  }
-
-  private generate(s: string, file: boolean): string {
+  private resolve(s: string, file: boolean): string {
     if (file) {
       if (!fs.existsSync(s)) {
         throw new Error(`config file ${s} not found`);
       }
       s = fs.readFileSync(s, {encoding: 'utf-8'});
     }
-    const configFile = this.context.tmpName({tmpdir: this.context.tmpDir()});
+    const configFile = Context.tmpName({tmpdir: Context.tmpDir()});
     fs.writeFileSync(configFile, s);
     return configFile;
   }

src/buildx/bake.ts

@@ -0,0 +1,108 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {Buildx} from './buildx';
+import {Exec} from '../exec';
+import {Inputs} from './inputs';
+import {Util} from '../util';
+
+import {BakeDefinition} from '../types/bake';
+
+export interface BakeOpts {
+  buildx?: Buildx;
+}
+
+export class Bake {
+  private readonly buildx: Buildx;
+
+  constructor(opts?: BakeOpts) {
+    this.buildx = opts?.buildx || new Buildx();
+  }
+
+  public async parseDefinitions(sources: Array<string>, targets?: Array<string>, overrides?: Array<string>, load?: boolean, push?: boolean, workdir?: string): Promise<BakeDefinition> {
+    const args = ['bake'];
+
+    let remoteDef;
+    const files: Array<string> = [];
+    if (sources) {
+      for (const source of sources.map(v => v.trim())) {
+        if (source.length == 0) {
+          continue;
+        }
+        if (!Util.isValidRef(source)) {
+          files.push(source);
+          continue;
+        }
+        if (remoteDef) {
+          throw new Error(`Only one remote bake definition is allowed`);
+        }
+        remoteDef = source;
+      }
+    }
+    if (remoteDef) {
+      args.push(remoteDef);
+    }
+    for (const file of files) {
+      args.push('--file', file);
+    }
+    if (overrides) {
+      for (const override of overrides) {
+        args.push('--set', override);
+      }
+    }
+    if (load) {
+      args.push('--load');
+    }
+    if (push) {
+      args.push('--push');
+    }
+
+    const printCmd = await this.buildx.getCommand([...args, '--print', ...(targets || [])]);
+    return await Exec.getExecOutput(printCmd.command, printCmd.args, {
+      cwd: workdir,
+      ignoreReturnCode: true,
+      silent: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(res.stderr);
+      }
+      return <BakeDefinition>JSON.parse(res.stdout.trim());
+    });
+  }
+
+  public static hasLocalExporter(def: BakeDefinition): boolean {
+    return Inputs.hasExporterType('local', Bake.exporters(def));
+  }
+
+  public static hasTarExporter(def: BakeDefinition): boolean {
+    return Inputs.hasExporterType('tar', Bake.exporters(def));
+  }
+
+  public static hasDockerExporter(def: BakeDefinition, load?: boolean): boolean {
+    return load || Inputs.hasExporterType('docker', Bake.exporters(def));
+  }
+
+  private static exporters(def: BakeDefinition): Array<string> {
+    const exporters = new Array<string>();
+    for (const key in def.target) {
+      const target = def.target[key];
+      if (target.output) {
+        exporters.push(...target.output);
+      }
+    }
+    return exporters;
+  }
+}

src/buildx/builder.ts

@@ -14,44 +14,58 @@
  * limitations under the License.
  */
 
-import * as exec from '@actions/exec';
+import * as core from '@actions/core';
 
 import {Buildx} from './buildx';
-import {Context} from '../context';
+import {Exec} from '../exec';
 
 import {BuilderInfo, NodeInfo} from '../types/builder';
 
 export interface BuilderOpts {
-  context: Context;
   buildx?: Buildx;
 }
 
 export class Builder {
-  private readonly context: Context;
   private readonly buildx: Buildx;
 
-  constructor(opts: BuilderOpts) {
-    this.context = opts.context;
-    this.buildx =
-      opts?.buildx ||
-      new Buildx({
-        context: this.context
+  constructor(opts?: BuilderOpts) {
+    this.buildx = opts?.buildx || new Buildx();
+  }
+
+  public async exists(name: string): Promise<boolean> {
+    const cmd = await this.buildx.getCommand(['inspect', name]);
+
+    const ok: boolean = await Exec.getExecOutput(cmd.command, cmd.args, {
+      ignoreReturnCode: true,
+      silent: true
+    })
+      .then(res => {
+        if (res.stderr.length > 0 && res.exitCode != 0) {
+          core.debug(`Builder.exists cmd err: ${res.stderr.trim()}`);
+          return false;
+        }
+        return res.exitCode == 0;
+      })
+      .catch(error => {
+        core.debug(`Builder.exists error: ${error}`);
+        return false;
       });
+
+    core.debug(`Builder.exists: ${ok}`);
+    return ok;
   }
 
   public async inspect(name: string): Promise<BuilderInfo> {
-    const cmd = this.buildx.getCommand(['inspect', name]);
-    return await exec
-      .getExecOutput(cmd.command, cmd.args, {
-        ignoreReturnCode: true,
-        silent: true
-      })
-      .then(res => {
-        if (res.stderr.length > 0 && res.exitCode != 0) {
-          throw new Error(res.stderr.trim());
-        }
-        return Builder.parseInspect(res.stdout);
-      });
+    const cmd = await this.buildx.getCommand(['inspect', name]);
+    return await Exec.getExecOutput(cmd.command, cmd.args, {
+      ignoreReturnCode: true,
+      silent: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(res.stderr.trim());
+      }
+      return Builder.parseInspect(res.stdout);
+    });
   }
 
   public static parseInspect(data: string): BuilderInfo {
@@ -91,7 +105,7 @@ export class Builder {
           break;
         }
         case 'driver options': {
-          node.driverOpts = (value.match(/(\w+)="([^"]*)"/g) || []).map(v => v.replace(/^(.*)="(.*)"$/g, '$1=$2'));
+          node['driver-opts'] = (value.match(/([a-zA-Z0-9_.]+)="([^"]*)"/g) || []).map(v => v.replace(/^(.*)="(.*)"$/g, '$1=$2'));
           break;
         }
         case 'status': {
@@ -99,11 +113,11 @@ export class Builder {
           break;
         }
         case 'flags': {
-          node.buildkitdFlags = value;
+          node['buildkitd-flags'] = value;
           break;
         }
         case 'buildkit': {
-          node.buildkitVersion = value;
+          node.buildkit = value;
           break;
         }
         case 'platforms': {

src/buildx/buildx.ts

@@ -14,90 +14,106 @@
  * limitations under the License.
  */
 
-import * as exec from '@actions/exec';
+import fs from 'fs';
+import path from 'path';
+import * as core from '@actions/core';
 import * as semver from 'semver';
 
-import {Docker} from '../docker';
-import {Context} from '../context';
-import {Inputs} from './inputs';
-import {Install} from './install';
+import {Docker} from '../docker/docker';
+import {Exec} from '../exec';
+
+import {Cert} from '../types/buildx';
 
 export interface BuildxOpts {
-  context: Context;
   standalone?: boolean;
 }
 
 export class Buildx {
-  private readonly context: Context;
-  private _version: string | undefined;
+  private _version: string;
+  private _versionOnce: boolean;
+  private readonly _standalone: boolean | undefined;
 
-  public readonly inputs: Inputs;
-  public readonly install: Install;
-  public readonly standalone: boolean;
+  public static readonly containerNamePrefix = 'buildx_buildkit_';
 
-  constructor(opts: BuildxOpts) {
-    this.context = opts.context;
-    this.inputs = new Inputs(this.context);
-    this.install = new Install({standalone: opts.standalone});
-    this.standalone = opts?.standalone ?? !Docker.isAvailable;
+  constructor(opts?: BuildxOpts) {
+    this._standalone = opts?.standalone;
+    this._version = '';
+    this._versionOnce = false;
   }
 
-  public getCommand(args: Array<string>) {
+  static get configDir(): string {
+    return process.env.BUILDX_CONFIG || path.join(Docker.configDir, 'buildx');
+  }
+
+  static get certsDir(): string {
+    return path.join(Buildx.configDir, 'certs');
+  }
+
+  public async isStandalone(): Promise<boolean> {
+    const standalone = this._standalone ?? !(await Docker.isAvailable());
+    core.debug(`Buildx.isStandalone: ${standalone}`);
+    return standalone;
+  }
+
+  public async getCommand(args: Array<string>) {
+    const standalone = await this.isStandalone();
     return {
-      command: this.standalone ? 'buildx' : 'docker',
-      args: this.standalone ? args : ['buildx', ...args]
+      command: standalone ? 'buildx' : 'docker',
+      args: standalone ? args : ['buildx', ...args]
     };
   }
 
   public async isAvailable(): Promise<boolean> {
-    const cmd = this.getCommand([]);
-    return await exec
-      .getExecOutput(cmd.command, cmd.args, {
-        ignoreReturnCode: true,
-        silent: true
-      })
+    const cmd = await this.getCommand([]);
+
+    const ok: boolean = await Exec.getExecOutput(cmd.command, cmd.args, {
+      ignoreReturnCode: true,
+      silent: true
+    })
       .then(res => {
         if (res.stderr.length > 0 && res.exitCode != 0) {
+          core.debug(`Buildx.isAvailable cmd err: ${res.stderr.trim()}`);
           return false;
         }
         return res.exitCode == 0;
       })
-      // eslint-disable-next-line @typescript-eslint/no-unused-vars
       .catch(error => {
+        core.debug(`Buildx.isAvailable error: ${error}`);
         return false;
       });
+
+    core.debug(`Buildx.isAvailable: ${ok}`);
+    return ok;
   }
 
   public async printInspect(name: string): Promise<void> {
-    const cmd = this.getCommand(['inspect', name]);
-    await exec.exec(cmd.command, cmd.args, {
+    const cmd = await this.getCommand(['inspect', name]);
+    await Exec.exec(cmd.command, cmd.args, {
       failOnStdErr: false
     });
   }
 
-  get version() {
-    return (async () => {
-      if (!this._version) {
-        const cmd = this.getCommand(['version']);
-        this._version = await exec
-          .getExecOutput(cmd.command, cmd.args, {
-            ignoreReturnCode: true,
-            silent: true
-          })
-          .then(res => {
-            if (res.stderr.length > 0 && res.exitCode != 0) {
-              throw new Error(res.stderr.trim());
-            }
-            return Buildx.parseVersion(res.stdout.trim());
-          });
-      }
+  public async version(): Promise<string> {
+    if (this._versionOnce) {
       return this._version;
-    })();
+    }
+    this._versionOnce = true;
+    const cmd = await this.getCommand(['version']);
+    this._version = await Exec.getExecOutput(cmd.command, cmd.args, {
+      ignoreReturnCode: true,
+      silent: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(res.stderr.trim());
+      }
+      return Buildx.parseVersion(res.stdout.trim());
+    });
+    return this._version;
   }
 
   public async printVersion() {
-    const cmd = this.getCommand(['version']);
-    await exec.exec(cmd.command, cmd.args, {
+    const cmd = await this.getCommand(['version']);
+    await Exec.exec(cmd.command, cmd.args, {
       failOnStdErr: false
     });
   }
@@ -111,10 +127,52 @@ export class Buildx {
   }
 
   public async versionSatisfies(range: string, version?: string): Promise<boolean> {
-    const ver = version ?? (await this.version);
+    const ver = version ?? (await this.version());
     if (!ver) {
+      core.debug(`Buildx.versionSatisfies false: undefined version`);
       return false;
     }
-    return semver.satisfies(ver, range) || /^[0-9a-f]{7}$/.exec(ver) !== null;
+    const res = semver.satisfies(ver, range) || /^[0-9a-f]{7}$/.exec(ver) !== null;
+    core.debug(`Buildx.versionSatisfies ${ver} statisfies ${range}: ${res}`);
+    return res;
+  }
+
+  public static resolveCertsDriverOpts(driver: string, endpoint: string, cert: Cert): Array<string> {
+    let url: URL;
+    try {
+      url = new URL(endpoint);
+    } catch (e) {
+      return [];
+    }
+    if (url.protocol != 'tcp:') {
+      return [];
+    }
+    const driverOpts: Array<string> = [];
+    if (Object.keys(cert).length == 0) {
+      return driverOpts;
+    }
+    let host = url.hostname;
+    if (url.port.length > 0) {
+      host += `-${url.port}`;
+    }
+    if (cert.cacert !== undefined) {
+      const cacertpath = path.join(Buildx.certsDir, `cacert_${host}.pem`);
+      fs.writeFileSync(cacertpath, cert.cacert);
+      driverOpts.push(`cacert=${cacertpath}`);
+    }
+    if (cert.cert !== undefined) {
+      const certpath = path.join(Buildx.certsDir, `cert_${host}.pem`);
+      fs.writeFileSync(certpath, cert.cert);
+      driverOpts.push(`cert=${certpath}`);
+    }
+    if (cert.key !== undefined) {
+      const keypath = path.join(Buildx.certsDir, `key_${host}.pem`);
+      fs.writeFileSync(keypath, cert.key);
+      driverOpts.push(`key=${keypath}`);
+    }
+    if (driver != 'remote') {
+      return [];
+    }
+    return driverOpts;
   }
 }

src/buildx/inputs.ts

@@ -22,30 +22,24 @@ import {parse} from 'csv-parse/sync';
 import {Context} from '../context';
 
 export class Inputs {
-  private readonly context: Context;
-
-  constructor(context: Context) {
-    this.context = context;
+  public static getBuildImageIDFilePath(): string {
+    return path.join(Context.tmpDir(), 'iidfile');
   }
 
-  public getBuildImageIDFilePath(): string {
-    return path.join(this.context.tmpDir(), 'iidfile').split(path.sep).join(path.posix.sep);
+  public static getBuildMetadataFilePath(): string {
+    return path.join(Context.tmpDir(), 'metadata-file');
   }
 
-  public getBuildMetadataFilePath(): string {
-    return path.join(this.context.tmpDir(), 'metadata-file').split(path.sep).join(path.posix.sep);
-  }
-
-  public getBuildImageID(): string | undefined {
-    const iidFile = this.getBuildImageIDFilePath();
+  public static resolveBuildImageID(): string | undefined {
+    const iidFile = Inputs.getBuildImageIDFilePath();
     if (!fs.existsSync(iidFile)) {
       return undefined;
     }
     return fs.readFileSync(iidFile, {encoding: 'utf-8'}).trim();
   }
 
-  public getBuildMetadata(): string | undefined {
-    const metadataFile = this.getBuildMetadataFilePath();
+  public static resolveBuildMetadata(): string | undefined {
+    const metadataFile = Inputs.getBuildMetadataFilePath();
     if (!fs.existsSync(metadataFile)) {
       return undefined;
     }
@@ -56,8 +50,8 @@ export class Inputs {
     return content;
   }
 
-  public getDigest(): string | undefined {
-    const metadata = this.getBuildMetadata();
+  public static resolveDigest(): string | undefined {
+    const metadata = Inputs.resolveBuildMetadata();
     if (metadata === undefined) {
       return undefined;
     }
@@ -68,15 +62,15 @@ export class Inputs {
     return undefined;
   }
 
-  public generateBuildSecretString(kvp: string): string {
-    return this.generateBuildSecret(kvp, false);
+  public static resolveBuildSecretString(kvp: string): string {
+    return Inputs.resolveBuildSecret(kvp, false);
   }
 
-  public generateBuildSecretFile(kvp: string): string {
-    return this.generateBuildSecret(kvp, true);
+  public static resolveBuildSecretFile(kvp: string): string {
+    return Inputs.resolveBuildSecret(kvp, true);
   }
 
-  public generateBuildSecret(kvp: string, file: boolean): string {
+  public static resolveBuildSecret(kvp: string, file: boolean): string {
     const delimiterIndex = kvp.indexOf('=');
     const key = kvp.substring(0, delimiterIndex);
     let value = kvp.substring(delimiterIndex + 1);
@@ -89,29 +83,28 @@ export class Inputs {
       }
       value = fs.readFileSync(value, {encoding: 'utf-8'});
     }
-    const secretFile = this.context.tmpName({tmpdir: this.context.tmpDir()});
+    const secretFile = Context.tmpName({tmpdir: Context.tmpDir()});
     fs.writeFileSync(secretFile, value);
     return `id=${key},src=${secretFile}`;
   }
 
-  public getProvenanceInput(name: string): string {
+  public static getProvenanceInput(name: string): string {
     const input = core.getInput(name);
     if (!input) {
       // if input is not set returns empty string
       return input;
     }
-    const builderID = this.context.provenanceBuilderID;
     try {
-      return core.getBooleanInput(name) ? `builder-id=${builderID}` : 'false';
+      return core.getBooleanInput(name) ? `builder-id=${Context.provenanceBuilderID()}` : 'false';
     } catch (err) {
       // not a valid boolean, so we assume it's a string
-      return this.getProvenanceAttrs(input);
+      return Inputs.resolveProvenanceAttrs(input);
     }
   }
 
-  public getProvenanceAttrs(input: string): string {
+  public static resolveProvenanceAttrs(input: string): string {
     if (!input) {
-      return `builder-id=${this.context.provenanceBuilderID}`;
+      return `builder-id=${Context.provenanceBuilderID()}`;
     }
     // parse attributes from input
     const fields = parse(input, {
@@ -129,7 +122,7 @@ export class Inputs {
       }
     }
     // if not add builder-id attribute
-    return `${input},builder-id=${this.context.provenanceBuilderID}`;
+    return `${input},builder-id=${Context.provenanceBuilderID()}`;
   }
 
   public static hasLocalExporter(exporters: string[]): boolean {
@@ -141,7 +134,7 @@ export class Inputs {
   }
 
   public static hasDockerExporter(exporters: string[], load?: boolean): boolean {
-    return load ?? Inputs.hasExporterType('docker', exporters);
+    return load || Inputs.hasExporterType('docker', exporters);
   }
 
   public static hasExporterType(name: string, exporters: string[]): boolean {

src/buildx/install.ts

@@ -23,6 +23,12 @@ import * as tc from '@actions/tool-cache';
 import * as semver from 'semver';
 import * as util from 'util';
 
+import {Buildx} from './buildx';
+import {Context} from '../context';
+import {Exec} from '../exec';
+import {Docker} from '../docker/docker';
+import {Git} from '../git';
+
 import {GitHubRelease} from '../types/github';
 
 export interface InstallOpts {
@@ -30,15 +36,17 @@ export interface InstallOpts {
 }
 
 export class Install {
-  private readonly opts: InstallOpts;
+  private readonly _standalone: boolean | undefined;
 
   constructor(opts?: InstallOpts) {
-    this.opts = opts || {};
+    this._standalone = opts?.standalone;
   }
 
-  public async install(version: string, dest: string): Promise<string> {
+  public async download(version: string): Promise<string> {
     const release: GitHubRelease = await Install.getRelease(version);
     const fversion = release.tag_name.replace(/^v+|v+$/g, '');
+    core.debug(`Install.download version: ${fversion}`);
+
     let toolPath: string;
     toolPath = tc.find('buildx', fversion, this.platform());
     if (!toolPath) {
@@ -46,15 +54,50 @@ export class Install {
       if (!semver.valid(c)) {
         throw new Error(`Invalid Buildx version "${fversion}".`);
       }
-      toolPath = await this.download(fversion);
+      toolPath = await this.fetchBinary(fversion);
     }
-    if (this.opts.standalone) {
-      return this.setStandalone(toolPath, dest);
-    }
-    return this.setPlugin(toolPath, dest);
+    core.debug(`Install.download toolPath: ${toolPath}`);
+
+    return toolPath;
   }
 
-  private async setStandalone(toolPath: string, dest: string): Promise<string> {
+  public async build(gitContext: string): Promise<string> {
+    // eslint-disable-next-line prefer-const
+    let [repo, ref] = gitContext.split('#');
+    if (ref.length == 0) {
+      ref = 'master';
+    }
+
+    let vspec: string;
+    // TODO: include full ref as fingerprint. Use commit sha as best-effort in the meantime.
+    if (ref.match(/^[0-9a-fA-F]{40}$/)) {
+      vspec = ref;
+    } else {
+      vspec = await Git.remoteSha(repo, ref);
+    }
+    core.debug(`Install.build: tool version spec ${vspec}`);
+
+    let toolPath: string;
+    toolPath = tc.find('buildx', vspec);
+    if (!toolPath) {
+      const outputDir = path.join(Context.tmpDir(), 'build-cache');
+      const buildCmd = await this.buildCommand(gitContext, outputDir);
+      toolPath = await Exec.getExecOutput(buildCmd.command, buildCmd.args, {
+        ignoreReturnCode: true
+      }).then(res => {
+        if (res.stderr.length > 0 && res.exitCode != 0) {
+          core.warning(res.stderr.trim());
+        }
+        return tc.cacheFile(`${outputDir}/buildx`, os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx', 'buildx', vspec, this.platform());
+      });
+    }
+
+    return toolPath;
+  }
+
+  public async installStandalone(toolPath: string, dest?: string): Promise<string> {
+    core.info('Standalone mode');
+    dest = dest || Context.tmpDir();
     const toolBinPath = path.join(toolPath, os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx');
     const binDir = path.join(dest, 'bin');
     if (!fs.existsSync(binDir)) {
@@ -63,12 +106,20 @@ export class Install {
     const filename: string = os.platform() == 'win32' ? 'buildx.exe' : 'buildx';
     const buildxPath: string = path.join(binDir, filename);
     fs.copyFileSync(toolBinPath, buildxPath);
+
+    core.info('Fixing perms');
     fs.chmodSync(buildxPath, '0755');
+
     core.addPath(binDir);
+    core.info('Added Buildx to PATH');
+
+    core.info(`Binary path: ${buildxPath}`);
     return buildxPath;
   }
 
-  private async setPlugin(toolPath: string, dest: string): Promise<string> {
+  public async installPlugin(toolPath: string, dest?: string): Promise<string> {
+    core.info('Docker plugin mode');
+    dest = dest || Docker.configDir;
     const toolBinPath = path.join(toolPath, os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx');
     const pluginsDir: string = path.join(dest, 'cli-plugins');
     if (!fs.existsSync(pluginsDir)) {
@@ -77,17 +128,58 @@ export class Install {
     const filename: string = os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx';
     const pluginPath: string = path.join(pluginsDir, filename);
     fs.copyFileSync(toolBinPath, pluginPath);
+
+    core.info('Fixing perms');
     fs.chmodSync(pluginPath, '0755');
+
+    core.info(`Plugin path: ${pluginPath}`);
     return pluginPath;
   }
 
-  private async download(version: string): Promise<string> {
+  private async buildCommand(gitContext: string, outputDir: string): Promise<{args: Array<string>; command: string}> {
+    const buildxStandaloneFound = await new Buildx({standalone: true}).isAvailable();
+    const buildxPluginFound = await new Buildx({standalone: false}).isAvailable();
+
+    let buildStandalone = false;
+    if ((await this.isStandalone()) && buildxStandaloneFound) {
+      core.debug(`Install.buildCommand: Buildx standalone found, build with it`);
+      buildStandalone = true;
+    } else if (!(await this.isStandalone()) && buildxPluginFound) {
+      core.debug(`Install.buildCommand: Buildx plugin found, build with it`);
+      buildStandalone = false;
+    } else if (buildxStandaloneFound) {
+      core.debug(`Install.buildCommand: Buildx plugin not found, but standalone found so trying to build with it`);
+      buildStandalone = true;
+    } else if (buildxPluginFound) {
+      core.debug(`Install.buildCommand: Buildx standalone not found, but plugin found so trying to build with it`);
+      buildStandalone = false;
+    } else {
+      throw new Error(`Neither buildx standalone or plugin have been found to build from ref ${gitContext}`);
+    }
+
+    //prettier-ignore
+    return await new Buildx({standalone: buildStandalone}).getCommand([
+      'build',
+      '--target', 'binaries',
+      '--build-arg', 'BUILDKIT_CONTEXT_KEEP_GIT_DIR=1',
+      '--output', `type=local,dest=${outputDir}`,
+      gitContext
+    ]);
+  }
+
+  private async isStandalone(): Promise<boolean> {
+    const standalone = this._standalone ?? !(await Docker.isAvailable());
+    core.debug(`Install.isStandalone: ${standalone}`);
+    return standalone;
+  }
+
+  private async fetchBinary(version: string): Promise<string> {
     const targetFile: string = os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx';
     const downloadURL = util.format('https://github.com/docker/buildx/releases/download/v%s/%s', version, this.filename(version));
+    core.info(`Downloading ${downloadURL}`);
     const downloadPath = await tc.downloadTool(downloadURL);
-    core.debug(`downloadURL: ${downloadURL}`);
-    core.debug(`downloadPath: ${downloadPath}`);
-    return await tc.cacheFile(downloadPath, targetFile, 'buildx', version);
+    core.debug(`Install.fetchBinary downloadPath: ${downloadPath}`);
+    return await tc.cacheFile(downloadPath, targetFile, 'buildx', version, this.platform());
   }
 
   private platform(): string {

src/context.ts

@@ -23,29 +23,32 @@ import * as github from '@actions/github';
 import {GitHub} from './github';
 
 export class Context {
-  public gitRef: string;
-  public buildGitContext: string;
-  public provenanceBuilderID: string;
+  private static readonly _tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'docker-actions-toolkit-'));
 
-  private readonly _tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'docker-actions-toolkit-')).split(path.sep).join(path.posix.sep);
-
-  constructor() {
-    this.gitRef = github.context.ref;
-    if (github.context.sha && this.gitRef && !this.gitRef.startsWith('refs/')) {
-      this.gitRef = `refs/heads/${github.context.ref}`;
-    }
-    if (github.context.sha && !this.gitRef.startsWith(`refs/pull/`)) {
-      this.gitRef = github.context.sha;
-    }
-    this.buildGitContext = `${GitHub.serverURL}/${github.context.repo.owner}/${github.context.repo.repo}.git#${this.gitRef}`;
-    this.provenanceBuilderID = `${GitHub.serverURL}/${github.context.repo.owner}/${github.context.repo.repo}/actions/runs/${github.context.runId}`;
+  public static tmpDir(): string {
+    return Context._tmpDir;
   }
 
-  public tmpDir(): string {
-    return this._tmpDir;
-  }
-
-  public tmpName(options?: tmp.TmpNameOptions): string {
+  public static tmpName(options?: tmp.TmpNameOptions): string {
     return tmp.tmpNameSync(options);
   }
+
+  public static gitRef(): string {
+    let gitRef = github.context.ref;
+    if (github.context.sha && gitRef && !gitRef.startsWith('refs/')) {
+      gitRef = `refs/heads/${github.context.ref}`;
+    }
+    if (github.context.sha && !gitRef.startsWith(`refs/pull/`)) {
+      gitRef = github.context.sha;
+    }
+    return gitRef;
+  }
+
+  public static gitContext(): string {
+    return `${GitHub.serverURL}/${github.context.repo.owner}/${github.context.repo.repo}.git#${Context.gitRef()}`;
+  }
+
+  public static provenanceBuilderID(): string {
+    return `${GitHub.serverURL}/${github.context.repo.owner}/${github.context.repo.repo}/actions/runs/${github.context.runId}`;
+  }
 }

src/docker.ts

@@ -1,66 +0,0 @@
-/**
- * Copyright 2023 actions-toolkit authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import os from 'os';
-import path from 'path';
-import * as exec from '@actions/exec';
-
-export class Docker {
-  static get configDir(): string {
-    return process.env.DOCKER_CONFIG || path.join(os.homedir(), '.docker');
-  }
-
-  static get isAvailable(): boolean {
-    let dockerAvailable = false;
-    exec
-      .getExecOutput('docker', undefined, {
-        ignoreReturnCode: true,
-        silent: true
-      })
-      .then(res => {
-        if (res.stderr.length > 0 && res.exitCode != 0) {
-          dockerAvailable = false;
-        } else {
-          dockerAvailable = res.exitCode == 0;
-        }
-      })
-      // eslint-disable-next-line @typescript-eslint/no-unused-vars
-      .catch(error => {
-        dockerAvailable = false;
-      });
-    return dockerAvailable;
-  }
-
-  public static async printVersion(standalone?: boolean) {
-    const noDocker = standalone ?? !Docker.isAvailable;
-    if (noDocker) {
-      return;
-    }
-    await exec.exec('docker', ['version'], {
-      failOnStdErr: false
-    });
-  }
-
-  public static async printInfo(standalone?: boolean) {
-    const noDocker = standalone ?? !Docker.isAvailable;
-    if (noDocker) {
-      return;
-    }
-    await exec.exec('docker', ['info'], {
-      failOnStdErr: false
-    });
-  }
-}

src/docker/assets.ts

@@ -0,0 +1,338 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'fs';
+import {Context} from '../context';
+
+export const setupDockerLinuxSh = (): string => {
+  return get('docker-setup-linux.sh', setupDockerLinuxShData, '0755');
+};
+
+export const setupDockerWinPs1 = (): string => {
+  return get('docker-setup-win.ps1', setupDockerWinPs1Data);
+};
+
+export const dockerServiceLogsPs1 = (): string => {
+  return get('docker-service-logs.ps1', dockerServiceLogsPs1Data);
+};
+
+export const colimaYaml = (): string => {
+  return get('colima.yaml', colimaYamlData);
+};
+
+const get = (filename: string, data: string, mode?: string): string => {
+  const assetPath = Context.tmpName({
+    template: `docker-asset-XXXXXX-${filename}`,
+    tmpdir: Context.tmpDir()
+  });
+  fs.writeFileSync(assetPath, data);
+  if (mode) {
+    fs.chmodSync(assetPath, mode);
+  }
+  return assetPath;
+};
+
+export const setupDockerLinuxShData = `
+#!/usr/bin/env bash
+
+set -eu
+
+: "\${TOOLDIR=}"
+: "\${RUNDIR=}"
+: "\${DOCKER_HOST=}"
+
+export PATH="$TOOLDIR::$PATH"
+
+if [ -z "$DOCKER_HOST" ]; then
+  echo >&2 'error: DOCKER_HOST required'
+  false
+fi
+
+if ! command -v dockerd &> /dev/null; then
+  echo >&2 'error: dockerd missing from PATH'
+  false
+fi
+
+mkdir -p "$RUNDIR"
+
+(
+  echo "Starting dockerd"
+  set -x
+  exec dockerd \\
+    --host="$DOCKER_HOST" \\
+    --exec-root="$RUNDIR/execroot" \\
+    --data-root="$RUNDIR/data" \\
+    --pidfile="$RUNDIR/docker.pid" \\
+    --userland-proxy=false \\
+    2>&1 | tee "$RUNDIR/dockerd.log"
+) &
+`;
+
+export const setupDockerWinPs1Data = `
+[CmdletBinding()]
+param(
+    [Parameter(Mandatory = $true)]
+    [string]$ToolDir,
+
+    [Parameter(Mandatory = $true)]
+    [string]$RunDir,
+
+    [Parameter(Mandatory = $true)]
+    [string]$DockerHost)
+
+$pwver = (Get-ItemProperty -Path HKLM:\\SOFTWARE\\Microsoft\\PowerShell\\3\\PowerShellEngine -Name 'PowerShellVersion').PowerShellVersion
+Write-Host "PowerShell version: $pwver"
+
+# Create run directory
+New-Item -ItemType Directory "$RunDir" -ErrorAction SilentlyContinue | Out-Null
+
+# Remove existing service
+if (Get-Service docker -ErrorAction SilentlyContinue) {
+  $dockerVersion = (docker version -f "{{.Server.Version}}")
+  Write-Host "Current installed Docker version: $dockerVersion"
+  # stop service
+  Stop-Service -Force -Name docker
+  Write-Host "Service stopped"
+  # remove service
+  sc.exe delete "docker"
+  # removes event log entry. we could use "Remove-EventLog -LogName -Source docker"
+  # but this cmd is not available atm
+  $ErrorActionPreference = "SilentlyContinue"
+  & reg delete "HKLM\\SYSTEM\\CurrentControlSet\\Services\\EventLog\\Application\\docker" /f 2>&1 | Out-Null
+  $ErrorActionPreference = "Stop"
+  Write-Host "Service removed"
+}
+
+$env:DOCKER_HOST = $DockerHost
+Write-Host "DOCKER_HOST: $env:DOCKER_HOST"
+
+Write-Host "Creating service"
+New-Item -ItemType Directory "$RunDir\\moby-root" -ErrorAction SilentlyContinue | Out-Null
+New-Item -ItemType Directory "$RunDir\\moby-exec" -ErrorAction SilentlyContinue | Out-Null
+Start-Process -Wait -NoNewWindow "$ToolDir\\dockerd" \`
+  -ArgumentList \`
+    "--host=$DockerHost", \`
+    "--data-root=$RunDir\\moby-root", \`
+    "--exec-root=$RunDir\\moby-exec", \`
+    "--pidfile=$RunDir\\docker.pid", \`
+    "--register-service"
+Write-Host "Starting service"
+Start-Service -Name docker
+Write-Host "Service started successfully!"
+
+$tries=20
+Write-Host "Waiting for Docker daemon to start..."
+While ($true) {
+  $ErrorActionPreference = "SilentlyContinue"
+  & "$ToolDir\\docker" version | Out-Null
+  $ErrorActionPreference = "Stop"
+  If ($LastExitCode -eq 0) {
+    break
+  }
+  $tries--
+  If ($tries -le 0) {
+    Throw "Failed to get a response from Docker daemon"
+  }
+  Write-Host -NoNewline "."
+  Start-Sleep -Seconds 1
+}
+Write-Host "Docker daemon started successfully!"
+`;
+
+export const dockerServiceLogsPs1Data = `
+Get-WinEvent -ea SilentlyContinue \`
+  -FilterHashtable @{ProviderName= "docker"; LogName = "application"} |
+    Sort-Object @{Expression="TimeCreated";Descending=$false} |
+    ForEach-Object {"$($_.TimeCreated.ToUniversalTime().ToString("o")) [$($_.LevelDisplayName)] $($_.Message)"}
+`;
+
+export const colimaYamlData = `
+# Number of CPUs to be allocated to the virtual machine.
+# Default: 2
+cpu: 2
+
+# Size of the disk in GiB to be allocated to the virtual machine.
+# NOTE: changing this has no effect after the virtual machine has been created.
+# Default: 60
+disk: 60
+
+# Size of the memory in GiB to be allocated to the virtual machine.
+# Default: 2
+memory: 2
+
+# Architecture of the virtual machine (x86_64, aarch64, host).
+# Default: host
+arch: host
+
+# Container runtime to be used (docker, containerd).
+# Default: docker
+runtime: docker
+
+# Kubernetes configuration for the virtual machine.
+kubernetes:
+  enabled: false
+
+# Auto-activate on the Host for client access.
+# Setting to true does the following on startup
+#  - sets as active Docker context (for Docker runtime).
+#  - sets as active Kubernetes context (if Kubernetes is enabled).
+# Default: true
+autoActivate: false
+
+# Network configurations for the virtual machine.
+network:
+  # Assign reachable IP address to the virtual machine.
+  # NOTE: this is currently macOS only and ignored on Linux.
+  # Default: false
+  address: false
+
+  # Custom DNS resolvers for the virtual machine.
+  #
+  # EXAMPLE
+  # dns: [8.8.8.8, 1.1.1.1]
+  #
+  # Default: []
+  dns: []
+
+  # DNS hostnames to resolve to custom targets using the internal resolver.
+  # This setting has no effect if a custom DNS resolver list is supplied above.
+  # It does not configure the /etc/hosts files of any machine or container.
+  # The value can be an IP address or another host.
+  #
+  # EXAMPLE
+  # dnsHosts:
+  #   example.com: 1.2.3.4
+  dnsHosts:
+    host.docker.internal: host.lima.internal
+
+  # Network driver to use (slirp, gvproxy), (requires vmType \`qemu\`)
+  #   - slirp is the default user mode networking provided by Qemu
+  #   - gvproxy is an alternative to VPNKit based on gVisor https://github.com/containers/gvisor-tap-vsock
+  # Default: gvproxy
+  driver: gvproxy
+
+# Forward the host's SSH agent to the virtual machine.
+# Default: false
+forwardAgent: false
+
+# Docker daemon configuration that maps directly to daemon.json.
+# https://docs.docker.com/engine/reference/commandline/dockerd/#daemon-configuration-file.
+# NOTE: some settings may affect Colima's ability to start docker. e.g. \`hosts\`.
+#
+# EXAMPLE - disable buildkit
+# docker:
+#   features:
+#     buildkit: false
+#
+# EXAMPLE - add insecure registries
+# docker:
+#   insecure-registries:
+#     - myregistry.com:5000
+#     - host.docker.internal:5000
+#
+# Colima default behaviour: buildkit enabled
+# Default: {}
+docker: {}
+
+# Virtual Machine type (qemu, vz)
+# NOTE: this is macOS 13 only. For Linux and macOS <13.0, qemu is always used.
+#
+# vz is macOS virtualization framework and requires macOS 13
+#
+# Default: qemu
+vmType: qemu
+
+# Volume mount driver for the virtual machine (virtiofs, 9p, sshfs).
+#
+# virtiofs is limited to macOS and vmType \`vz\`. It is the fastest of the options.
+#
+# 9p is the recommended and the most stable option for vmType \`qemu\`.
+#
+# sshfs is faster than 9p but the least reliable of the options (when there are lots
+# of concurrent reads or writes).
+#
+# Default: virtiofs (for vz), sshfs (for qemu)
+mountType: 9p
+
+# The CPU type for the virtual machine (requires vmType \`qemu\`).
+# Options available for host emulation can be checked with: \`qemu-system-$(arch) -cpu help\`.
+# Instructions are also supported by appending to the cpu type e.g. "qemu64,+ssse3".
+# Default: host
+cpuType: host
+
+# For a more general purpose virtual machine, Ubuntu container is optionally provided
+# as a layer on the virtual machine.
+# The underlying virtual machine is still accessible via \`colima ssh --layer=false\` or running \`colima\` in
+# the Ubuntu session.
+#
+# Default: false
+layer: false
+
+# Custom provision scripts for the virtual machine.
+# Provisioning scripts are executed on startup and therefore needs to be idempotent.
+#
+# EXAMPLE - script exected as root
+# provision:
+#   - mode: system
+#     script: apk add htop vim
+#
+# EXAMPLE - script exected as user
+# provision:
+#   - mode: user
+#     script: |
+#       [ -f ~/.provision ] && exit 0;
+#       echo provisioning as $USER...
+#       touch ~/.provision
+#
+# Default: []
+provision:
+  - mode: system
+    script: |
+      mkdir -p /tmp/docker-bins
+      cd /tmp/docker-bins
+      wget -qO- "https://download.docker.com/linux/static/{{dockerChannel}}/{{hostArch}}/docker-{{dockerVersion}}.tgz" | tar xvz --strip 1
+      mv -f /tmp/docker-bins/* /usr/bin/
+
+# Modify ~/.ssh/config automatically to include a SSH config for the virtual machine.
+# SSH config will still be generated in ~/.colima/ssh_config regardless.
+# Default: true
+sshConfig: false
+
+# Configure volume mounts for the virtual machine.
+# Colima mounts user's home directory by default to provide a familiar
+# user experience.
+#
+# EXAMPLE
+# mounts:
+#   - location: ~/secrets
+#     writable: false
+#   - location: ~/projects
+#     writable: true
+#
+# Colima default behaviour: $HOME and /tmp/colima are mounted as writable.
+# Default: []
+mounts: []
+
+# Environment variables for the virtual machine.
+#
+# EXAMPLE
+# env:
+#   KEY: value
+#   ANOTHER_KEY: another value
+#
+# Default: {}
+env: {}
+`;

src/docker/docker.ts

@@ -0,0 +1,64 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import os from 'os';
+import path from 'path';
+import * as core from '@actions/core';
+import * as io from '@actions/io';
+import {Exec} from '../exec';
+
+export class Docker {
+  static get configDir(): string {
+    return process.env.DOCKER_CONFIG || path.join(os.homedir(), '.docker');
+  }
+
+  public static async isAvailable(): Promise<boolean> {
+    return await io
+      .which('docker', true)
+      .then(res => {
+        core.debug(`Docker.isAvailable ok: ${res}`);
+        return true;
+      })
+      .catch(error => {
+        core.debug(`Docker.isAvailable error: ${error}`);
+        return false;
+      });
+  }
+
+  public static async context(name?: string): Promise<string> {
+    const args = ['context', 'inspect', '--format', '{{.Name}}'];
+    if (name) {
+      args.push(name);
+    }
+    return await Exec.getExecOutput(`docker`, args, {
+      ignoreReturnCode: true,
+      silent: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(res.stderr);
+      }
+      return res.stdout.trim();
+    });
+  }
+
+  public static async printVersion(): Promise<void> {
+    await Exec.exec('docker', ['version']);
+  }
+
+  public static async printInfo(): Promise<void> {
+    await Exec.exec('docker', ['info']);
+  }
+}

src/docker/install.ts

@@ -0,0 +1,386 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import * as child_process from 'child_process';
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import retry from 'async-retry';
+import * as handlebars from 'handlebars';
+import * as util from 'util';
+import * as core from '@actions/core';
+import * as httpm from '@actions/http-client';
+import * as io from '@actions/io';
+import * as tc from '@actions/tool-cache';
+
+import {Context} from '../context';
+import {Exec} from '../exec';
+import {Util} from '../util';
+import {colimaYamlData, dockerServiceLogsPs1, setupDockerLinuxSh, setupDockerWinPs1} from './assets';
+import {GitHubRelease} from '../types/github';
+
+export interface InstallOpts {
+  version?: string;
+  channel?: string;
+  runDir: string;
+  contextName?: string;
+}
+
+export class Install {
+  private readonly runDir: string;
+  private readonly version: string;
+  private readonly channel: string;
+  private readonly contextName: string;
+  private _version: string | undefined;
+  private _toolDir: string | undefined;
+
+  constructor(opts: InstallOpts) {
+    this.runDir = opts.runDir;
+    this.version = opts.version || 'latest';
+    this.channel = opts.channel || 'stable';
+    this.contextName = opts.contextName || 'setup-docker-action';
+  }
+
+  get toolDir(): string {
+    return this._toolDir || Context.tmpDir();
+  }
+
+  public async download(): Promise<string> {
+    const release: GitHubRelease = await Install.getRelease(this.version);
+    this._version = release.tag_name.replace(/^v+|v+$/g, '');
+    core.debug(`docker.Install.download version: ${this._version}`);
+
+    const downloadURL = this.downloadURL(this._version, this.channel);
+    core.info(`Downloading ${downloadURL}`);
+
+    const downloadPath = await tc.downloadTool(downloadURL);
+    core.debug(`docker.Install.download downloadPath: ${downloadPath}`);
+
+    let extractFolder: string;
+    if (os.platform() == 'win32') {
+      extractFolder = await tc.extractZip(downloadPath);
+    } else {
+      extractFolder = await tc.extractTar(downloadPath);
+    }
+    if (Util.isDirectory(path.join(extractFolder, 'docker'))) {
+      extractFolder = path.join(extractFolder, 'docker');
+    }
+    core.debug(`docker.Install.download extractFolder: ${extractFolder}`);
+
+    core.info('Fixing perms');
+    fs.readdir(path.join(extractFolder), function (err, files) {
+      if (err) {
+        throw err;
+      }
+      // eslint-disable-next-line @typescript-eslint/no-unused-vars
+      files.forEach(function (file, index) {
+        fs.chmodSync(path.join(extractFolder, file), '0755');
+      });
+    });
+
+    const tooldir = await tc.cacheDir(extractFolder, `docker-${this.channel}`, this._version.replace(/(0+)([1-9]+)/, '$2'));
+    core.addPath(tooldir);
+    core.info('Added Docker to PATH');
+
+    this._toolDir = tooldir;
+    return tooldir;
+  }
+
+  public async install(): Promise<void> {
+    if (!this.toolDir) {
+      throw new Error('toolDir must be set. Run download first.');
+    }
+    if (!this.runDir) {
+      throw new Error('runDir must be set');
+    }
+    switch (os.platform()) {
+      case 'darwin': {
+        await this.installDarwin();
+        break;
+      }
+      case 'linux': {
+        await this.installLinux();
+        break;
+      }
+      case 'win32': {
+        await this.installWindows();
+        break;
+      }
+      default: {
+        throw new Error(`Unsupported platform: ${os.platform()}`);
+      }
+    }
+  }
+
+  private async installDarwin(): Promise<void> {
+    const colimaDir = path.join(os.homedir(), '.colima', 'default'); // TODO: create a custom colima profile to avoid overlap with other actions
+    await io.mkdirP(colimaDir);
+    const dockerHost = `unix://${colimaDir}/docker.sock`;
+
+    if (!(await Install.colimaInstalled())) {
+      await core.group('Installing colima', async () => {
+        await Exec.exec('brew', ['install', 'colima']);
+      });
+    }
+
+    await core.group('Creating colima config', async () => {
+      const colimaCfg = handlebars.compile(colimaYamlData)({
+        hostArch: Install.platformArch(),
+        dockerVersion: this._version,
+        dockerChannel: this.channel
+      });
+      core.info(`Writing colima config to ${path.join(colimaDir, 'colima.yaml')}`);
+      fs.writeFileSync(path.join(colimaDir, 'colima.yaml'), colimaCfg);
+      core.info(colimaCfg);
+    });
+
+    // colima is already started on the runner so env var added in download
+    // method is not expanded to the running process.
+    const envs = Object.assign({}, process.env, {
+      PATH: `${this.toolDir}:${process.env.PATH}`
+    }) as {
+      [key: string]: string;
+    };
+    await core.group('Starting colima', async () => {
+      await Exec.exec('colima', ['start', '--very-verbose'], {env: envs});
+    });
+
+    await core.group('Create Docker context', async () => {
+      await Exec.exec('docker', ['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
+      await Exec.exec('docker', ['context', 'use', this.contextName]);
+    });
+  }
+
+  private async installLinux(): Promise<void> {
+    const dockerHost = `unix://${path.join(this.runDir, 'docker.sock')}`;
+    await io.mkdirP(this.runDir);
+
+    await core.group('Start Docker daemon', async () => {
+      const bashPath: string = await io.which('bash', true);
+      const proc = await child_process.spawn(`sudo -E ${bashPath} ${setupDockerLinuxSh()}`, [], {
+        detached: true,
+        shell: true,
+        stdio: ['ignore', process.stdout, process.stderr],
+        env: Object.assign({}, process.env, {
+          TOOLDIR: this.toolDir,
+          RUNDIR: this.runDir,
+          DOCKER_HOST: dockerHost
+        }) as {
+          [key: string]: string;
+        }
+      });
+      proc.unref();
+      await retry(
+        async bail => {
+          await Exec.getExecOutput(`docker version`, undefined, {
+            ignoreReturnCode: true,
+            silent: true,
+            env: Object.assign({}, process.env, {
+              DOCKER_HOST: dockerHost
+            }) as {
+              [key: string]: string;
+            }
+          })
+            .then(res => {
+              if (res.stderr.length > 0 && res.exitCode != 0) {
+                bail(new Error(res.stderr));
+                return false;
+              }
+              return res.exitCode == 0;
+            })
+            .catch(error => {
+              bail(error);
+              return false;
+            });
+        },
+        {
+          retries: 5
+        }
+      );
+      core.info(`Docker daemon started started successfully`);
+    });
+
+    await core.group('Create Docker context', async () => {
+      await Exec.exec('docker', ['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
+      await Exec.exec('docker', ['context', 'use', this.contextName]);
+    });
+  }
+
+  private async installWindows(): Promise<void> {
+    const dockerHost = 'npipe:////./pipe/setup_docker_action';
+
+    await core.group('Install Docker daemon service', async () => {
+      const setupCmd = await Util.powershellCommand(setupDockerWinPs1(), {
+        ToolDir: this.toolDir,
+        RunDir: this.runDir,
+        DockerHost: dockerHost
+      });
+      await Exec.exec(setupCmd.command, setupCmd.args);
+      const logCmd = await Util.powershellCommand(dockerServiceLogsPs1());
+      await Exec.exec(logCmd.command, logCmd.args);
+    });
+
+    await core.group('Create Docker context', async () => {
+      await Exec.exec('docker', ['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
+      await Exec.exec('docker', ['context', 'use', this.contextName]);
+    });
+  }
+
+  public async tearDown(): Promise<void> {
+    if (!this.runDir) {
+      throw new Error('runDir must be set');
+    }
+    switch (os.platform()) {
+      case 'darwin': {
+        await this.tearDownDarwin();
+        break;
+      }
+      case 'linux': {
+        await this.tearDownLinux();
+        break;
+      }
+      case 'win32': {
+        await this.tearDownWindows();
+        break;
+      }
+      default: {
+        throw new Error(`Unsupported platform: ${os.platform()}`);
+      }
+    }
+  }
+
+  private async tearDownDarwin(): Promise<void> {
+    await core.group('Docker daemon logs', async () => {
+      await Exec.exec('colima', ['exec', '--', 'cat', '/var/log/docker.log']);
+    });
+    await core.group('Stopping colima', async () => {
+      await Exec.exec('colima', ['stop', '--very-verbose']);
+    });
+    await core.group('Removing Docker context', async () => {
+      await Exec.exec('docker', ['context', 'rm', '-f', this.contextName]);
+    });
+    await core.group(`Cleaning up runDir`, async () => {
+      await Exec.exec('sudo', ['rm', '-rf', this.runDir]);
+    });
+  }
+
+  private async tearDownLinux(): Promise<void> {
+    await core.group('Docker daemon logs', async () => {
+      core.info(fs.readFileSync(path.join(this.runDir, 'dockerd.log'), {encoding: 'utf8'}));
+    });
+    await core.group('Stopping Docker daemon', async () => {
+      await Exec.exec('sudo', ['kill', fs.readFileSync(path.join(this.runDir, 'docker.pid')).toString().trim()]);
+    });
+    await core.group('Removing Docker context', async () => {
+      await Exec.exec('docker', ['context', 'rm', '-f', this.contextName]);
+    });
+    await core.group(`Cleaning up runDir`, async () => {
+      await Exec.exec('sudo', ['rm', '-rf', this.runDir]);
+    });
+  }
+
+  private async tearDownWindows(): Promise<void> {
+    await core.group('Docker daemon logs', async () => {
+      const logCmd = await Util.powershellCommand(dockerServiceLogsPs1());
+      await Exec.exec(logCmd.command, logCmd.args);
+    });
+    await core.group('Removing Docker context', async () => {
+      await Exec.exec('docker', ['context', 'rm', '-f', this.contextName]);
+    });
+  }
+
+  private downloadURL(version: string, channel: string): string {
+    const platformOS = Install.platformOS();
+    const platformArch = Install.platformArch();
+    const ext = platformOS === 'win' ? '.zip' : '.tgz';
+    return util.format('https://download.docker.com/%s/static/%s/%s/docker-%s%s', platformOS, channel, platformArch, version, ext);
+  }
+
+  private static platformOS(): string {
+    switch (os.platform()) {
+      case 'darwin': {
+        return 'mac';
+      }
+      case 'linux': {
+        return 'linux';
+      }
+      case 'win32': {
+        return 'win';
+      }
+      default: {
+        return os.platform();
+      }
+    }
+  }
+
+  private static platformArch(): string {
+    switch (os.arch()) {
+      case 'x64': {
+        return 'x86_64';
+      }
+      case 'ppc64': {
+        return 'ppc64le';
+      }
+      case 'arm': {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const arm_version = (process.config.variables as any).arm_version;
+        switch (arm_version) {
+          case 6: {
+            return 'armel';
+          }
+          case 7: {
+            return 'armhf';
+          }
+          default: {
+            return `v${arm_version}`;
+          }
+        }
+      }
+      default: {
+        return os.arch();
+      }
+    }
+  }
+
+  private static async colimaInstalled(): Promise<boolean> {
+    return await io
+      .which('colima', true)
+      .then(res => {
+        core.debug(`docker.Install.colimaAvailable ok: ${res}`);
+        return true;
+      })
+      .catch(error => {
+        core.debug(`docker.Install.colimaAvailable error: ${error}`);
+        return false;
+      });
+  }
+
+  public static async getRelease(version: string): Promise<GitHubRelease> {
+    const url = `https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/docker-releases.json`;
+    const http: httpm.HttpClient = new httpm.HttpClient('docker-actions-toolkit');
+    const resp: httpm.HttpClientResponse = await http.get(url);
+    const body = await resp.readBody();
+    const statusCode = resp.message.statusCode || 500;
+    if (statusCode >= 400) {
+      throw new Error(`Failed to get Docker release ${version} from ${url} with status code ${statusCode}: ${body}`);
+    }
+    const releases = <Record<string, GitHubRelease>>JSON.parse(body);
+    if (!releases[version]) {
+      throw new Error(`Cannot find Docker release ${version} in ${url}`);
+    }
+    return releases[version];
+  }
+}

src/dockerhub.ts

@@ -0,0 +1,127 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import * as core from '@actions/core';
+import * as httpm from '@actions/http-client';
+import {HttpCodes} from '@actions/http-client';
+
+import {RepositoryRequest, RepositoryResponse, RepositoryTagsRequest, RepositoryTagsResponse, TokenRequest, TokenResponse, UpdateRepoDescriptionRequest} from './types/dockerhub';
+
+export interface DockerHubOpts {
+  credentials: TokenRequest;
+}
+
+const apiBaseURL = 'https://hub.docker.com';
+const loginURL = `${apiBaseURL}/v2/users/login?refresh_token=true`;
+const repositoriesURL = `${apiBaseURL}/v2/repositories/`;
+
+export class DockerHub {
+  private readonly opts: DockerHubOpts;
+  private readonly httpc: httpm.HttpClient;
+
+  private constructor(opts: DockerHubOpts, httpc: httpm.HttpClient) {
+    this.opts = opts;
+    this.httpc = httpc;
+  }
+
+  public static async build(opts: DockerHubOpts): Promise<DockerHub> {
+    return new DockerHub(
+      opts,
+      new httpm.HttpClient('docker-actions-toolkit', [], {
+        headers: {
+          Authorization: `JWT ${await DockerHub.login(opts.credentials)}`,
+          'Content-Type': 'application/json'
+        }
+      })
+    );
+  }
+
+  public async getRepositoryTags(req: RepositoryTagsRequest): Promise<RepositoryTagsResponse> {
+    const url = new URL(`${repositoriesURL}${req.namespace}/${req.name}/tags`);
+    if (req.page) {
+      url.searchParams.append('page', req.page.toString());
+    }
+    if (req.page_size) {
+      url.searchParams.append('page_size', req.page_size.toString());
+    }
+    const resp: httpm.HttpClientResponse = await this.httpc.get(url.toString());
+    return <RepositoryTagsResponse>JSON.parse(await DockerHub.handleResponse(resp));
+  }
+
+  public async getRepositoryAllTags(req: RepositoryTagsRequest): Promise<RepositoryTagsResponse> {
+    const tags: RepositoryTagsResponse = await this.getRepositoryTags(req);
+    while (tags.next) {
+      const nextURL = new URL(tags.next);
+      const pageNumber = Number(nextURL.searchParams.get('page'));
+      const pageSize = Number(nextURL.searchParams.get('page_size')) || undefined;
+      const nextTags = await this.getRepositoryTags({
+        namespace: req.namespace,
+        name: req.name,
+        page: pageNumber,
+        page_size: pageSize || req.page_size
+      } as RepositoryTagsRequest);
+      tags.results.push(...nextTags.results);
+      tags.next = nextTags.next;
+    }
+    return tags;
+  }
+
+  public async getRepository(req: RepositoryRequest): Promise<RepositoryResponse> {
+    const resp: httpm.HttpClientResponse = await this.httpc.get(`${repositoriesURL}${req.namespace}/${req.name}`);
+    return <RepositoryResponse>JSON.parse(await DockerHub.handleResponse(resp));
+  }
+
+  public async updateRepoDescription(req: UpdateRepoDescriptionRequest): Promise<RepositoryResponse> {
+    const body = {
+      full_description: req.full_description
+    };
+    if (req.description) {
+      body['description'] = req.description;
+    }
+    const resp: httpm.HttpClientResponse = await this.httpc.patch(`${repositoriesURL}${req.namespace}/${req.name}`, JSON.stringify(body));
+    return <RepositoryResponse>JSON.parse(await DockerHub.handleResponse(resp));
+  }
+
+  private static async login(req: TokenRequest): Promise<string> {
+    const http: httpm.HttpClient = new httpm.HttpClient('docker-actions-toolkit', [], {
+      headers: {
+        'Content-Type': 'application/json'
+      }
+    });
+    const resp: httpm.HttpClientResponse = await http.post(loginURL, JSON.stringify(req));
+    const tokenResp = <TokenResponse>JSON.parse(await DockerHub.handleResponse(resp));
+    core.setSecret(`${tokenResp.token}`);
+    return `${tokenResp.token}`;
+  }
+
+  private static async handleResponse(resp: httpm.HttpClientResponse): Promise<string> {
+    const body = await resp.readBody();
+    resp.message.statusCode = resp.message.statusCode || HttpCodes.InternalServerError;
+    if (resp.message.statusCode < 200 || resp.message.statusCode >= 300) {
+      if (resp.message.statusCode == HttpCodes.Unauthorized) {
+        throw new Error(`Docker Hub API: operation not permitted`);
+      }
+      const errResp = <Record<string, string>>JSON.parse(body);
+      for (const k of ['message', 'detail', 'error']) {
+        if (errResp[k]) {
+          throw new Error(`Docker Hub API: bad status code ${resp.message.statusCode}: ${errResp[k]}`);
+        }
+      }
+      throw new Error(`Docker Hub API: bad status code ${resp.message.statusCode}`);
+    }
+    return body;
+  }
+}

src/exec.ts

@@ -0,0 +1,31 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import * as core from '@actions/core';
+import * as exec from '@actions/exec';
+import {ExecOptions, ExecOutput} from '@actions/exec';
+
+export class Exec {
+  public static async exec(commandLine: string, args?: string[], options?: ExecOptions): Promise<number> {
+    core.debug(`Exec.exec: ${commandLine} ${args?.join(' ')}`);
+    return exec.exec(commandLine, args, options);
+  }
+
+  public static async getExecOutput(commandLine: string, args?: string[], options?: ExecOptions): Promise<ExecOutput> {
+    core.debug(`Exec.getExecOutput: ${commandLine} ${args?.join(' ')}`);
+    return exec.getExecOutput(commandLine, args, options);
+  }
+}

src/git.ts

@@ -14,24 +14,82 @@
  * limitations under the License.
  */
 
-import * as exec from '@actions/exec';
+import {Exec} from './exec';
+import {Context} from '@actions/github/lib/context';
+import {Context as GitContext} from './types/git';
 
 export class Git {
-  public static async getRemoteSha(repo: string, ref: string): Promise<string> {
-    return await exec
-      .getExecOutput(`git`, ['ls-remote', repo, ref], {
-        ignoreReturnCode: true,
-        silent: true
+  public static async context(): Promise<GitContext> {
+    const ctx = new Context();
+    ctx.ref = await Git.ref();
+    ctx.sha = await Git.fullCommit();
+    return ctx;
+  }
+
+  public static async isInsideWorkTree(): Promise<boolean> {
+    return await Git.exec(['rev-parse', '--is-inside-work-tree'])
+      .then(out => {
+        return out === 'true';
       })
-      .then(res => {
-        if (res.stderr.length > 0 && res.exitCode != 0) {
-          throw new Error(res.stderr);
-        }
-        const [rsha] = res.stdout.trim().split(/[\s\t]/);
-        if (rsha.length == 0) {
-          throw new Error(`Cannot find remote ref for ${repo}#${ref}`);
-        }
-        return rsha;
+      .catch(() => {
+        return false;
       });
   }
+
+  public static async remoteSha(repo: string, ref: string): Promise<string> {
+    return await Git.exec(['ls-remote', repo, ref]).then(out => {
+      const [rsha] = out.split(/[\s\t]/);
+      if (rsha.length == 0) {
+        throw new Error(`Cannot find remote ref for ${repo}#${ref}`);
+      }
+      return rsha;
+    });
+  }
+
+  public static async remoteURL(): Promise<string> {
+    return await Git.exec(['remote', 'get-url', 'origin']).then(rurl => {
+      if (rurl.length == 0) {
+        return Git.exec(['remote', 'get-url', 'upstream']).then(rurl => {
+          if (rurl.length == 0) {
+            throw new Error(`Cannot find remote URL for origin or upstream`);
+          }
+          return rurl;
+        });
+      }
+      return rurl;
+    });
+  }
+
+  public static async ref(): Promise<string> {
+    return await Git.exec(['symbolic-ref', 'HEAD']);
+  }
+
+  public static async fullCommit(): Promise<string> {
+    return await Git.exec(['show', '--format=%H', 'HEAD', '--quiet', '--']);
+  }
+
+  public static async shortCommit(): Promise<string> {
+    return await Git.exec(['show', '--format=%h', 'HEAD', '--quiet', '--']);
+  }
+
+  public static async tag(): Promise<string> {
+    return await Git.exec(['tag', '--points-at', 'HEAD', '--sort', '-version:creatordate']).then(tags => {
+      if (tags.length == 0) {
+        return Git.exec(['describe', '--tags', '--abbrev=0']);
+      }
+      return tags.split('\n')[0];
+    });
+  }
+
+  private static async exec(args: string[] = []): Promise<string> {
+    return await Exec.getExecOutput(`git`, args, {
+      ignoreReturnCode: true,
+      silent: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(res.stderr);
+      }
+      return res.stdout.trim();
+    });
+  }
 }

src/github.ts

@@ -15,11 +15,12 @@
  */
 
 import {GitHub as Octokit} from '@actions/github/lib/utils';
+import * as core from '@actions/core';
 import * as github from '@actions/github';
 import {Context} from '@actions/github/lib/context';
 import jwt_decode from 'jwt-decode';
 
-import {GitHubActionsRuntimeToken, GitHubRepo} from './types/github';
+import {GitHubActionsRuntimeToken, GitHubActionsRuntimeTokenAC, GitHubRepo} from './types/github';
 
 export interface GitHubOpts {
   token?: string;
@@ -48,8 +49,41 @@ export class GitHub {
     return process.env.GITHUB_API_URL || 'https://api.github.com';
   }
 
-  static get actionsRuntimeToken(): GitHubActionsRuntimeToken {
+  static get actionsRuntimeToken(): GitHubActionsRuntimeToken | undefined {
     const token = process.env['ACTIONS_RUNTIME_TOKEN'] || '';
-    return token ? jwt_decode<GitHubActionsRuntimeToken>(token) : {};
+    return token ? jwt_decode<GitHubActionsRuntimeToken>(token) : undefined;
+  }
+
+  public static async printActionsRuntimeTokenACs() {
+    let jwt: GitHubActionsRuntimeToken | undefined;
+    try {
+      jwt = GitHub.actionsRuntimeToken;
+    } catch (e) {
+      throw new Error(`Cannot parse GitHub Actions Runtime Token: ${e.message}`);
+    }
+    if (!jwt) {
+      throw new Error(`ACTIONS_RUNTIME_TOKEN not set`);
+    }
+    try {
+      <Array<GitHubActionsRuntimeTokenAC>>JSON.parse(`${jwt.ac}`).forEach(ac => {
+        let permission: string;
+        switch (ac.Permission) {
+          case 1:
+            permission = 'read';
+            break;
+          case 2:
+            permission = 'write';
+            break;
+          case 3:
+            permission = 'read/write';
+            break;
+          default:
+            permission = `unimplemented (${ac.Permission})`;
+        }
+        core.info(`${ac.Scope}: ${permission}`);
+      });
+    } catch (e) {
+      throw new Error(`Cannot parse GitHub Actions Runtime Token ACs: ${e.message}`);
+    }
   }
 }

src/index.ts

@@ -0,0 +1,42 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import * as core from '@actions/core';
+
+const isPost = !!process.env['STATE_isPost'];
+if (!isPost) {
+  core.saveState('isPost', 'true');
+}
+
+/**
+ * Runs a GitHub Action.
+ * Output will be streamed to the live console.
+ *
+ * @param     main            runs the defined function.
+ * @param     post            runs the defined function at the end of the job if set.
+ * @returns   Promise<void>
+ */
+export async function run(main: () => Promise<void>, post?: () => Promise<void>): Promise<void> {
+  if (!isPost) {
+    try {
+      await main();
+    } catch (e) {
+      core.setFailed(e.message);
+    }
+  } else if (post) {
+    await post();
+  }
+}

src/toolkit.ts

@@ -14,8 +14,10 @@
  * limitations under the License.
  */
 
-import {Context} from './context';
 import {Buildx} from './buildx/buildx';
+import {Install as BuildxInstall} from './buildx/install';
+import {Bake} from './buildx/bake';
+import {Builder} from './buildx/builder';
 import {BuildKit} from './buildkit/buildkit';
 import {GitHub} from './github';
 
@@ -28,15 +30,19 @@ export interface ToolkitOpts {
 }
 
 export class Toolkit {
-  public context: Context;
   public github: GitHub;
   public buildx: Buildx;
+  public buildxInstall: BuildxInstall;
+  public bake: Bake;
+  public builder: Builder;
   public buildkit: BuildKit;
 
   constructor(opts: ToolkitOpts = {}) {
-    this.context = new Context();
     this.github = new GitHub({token: opts.githubToken});
-    this.buildx = new Buildx({context: this.context});
-    this.buildkit = new BuildKit({context: this.context, buildx: this.buildx});
+    this.buildx = new Buildx();
+    this.buildxInstall = new BuildxInstall();
+    this.bake = new Bake({buildx: this.buildx});
+    this.builder = new Builder({buildx: this.buildx});
+    this.buildkit = new BuildKit({buildx: this.buildx});
   }
 }

src/types/bake.ts

@@ -0,0 +1,45 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export interface BakeDefinition {
+  group: Record<string, Group>;
+  target: Record<string, Target>;
+}
+
+export interface Group {
+  targets: Array<string>;
+}
+
+export interface Target {
+  args?: Record<string, string>;
+  attest?: Array<string>;
+  'cache-from'?: Array<string>;
+  'cache-to'?: Array<string>;
+  context: string;
+  contexts?: Record<string, string>;
+  dockerfile: string;
+  'dockerfile-inline'?: string;
+  labels?: Record<string, string>;
+  'no-cache'?: boolean;
+  'no-cache-filter'?: Array<string>;
+  output?: Array<string>;
+  platforms?: Array<string>;
+  pull?: boolean;
+  secret?: Array<string>;
+  ssh?: Array<string>;
+  tags?: Array<string>;
+  target?: string;
+}

src/types/builder.ts

@@ -21,12 +21,15 @@ export interface BuilderInfo {
   nodes: NodeInfo[];
 }
 
-export interface NodeInfo {
+export interface Node {
   name?: string;
   endpoint?: string;
-  driverOpts?: Array<string>;
-  status?: string;
-  buildkitdFlags?: string;
-  buildkitVersion?: string;
+  'driver-opts'?: Array<string>;
+  'buildkitd-flags'?: string;
   platforms?: string;
 }
+
+export interface NodeInfo extends Node {
+  status?: string;
+  buildkit?: string;
+}

src/types/buildx.ts

@@ -0,0 +1,21 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export interface Cert {
+  cacert?: string;
+  cert?: string;
+  key?: string;
+}

src/types/dockerhub.ts

@@ -0,0 +1,113 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export interface TokenRequest {
+  username: string;
+  password: string;
+}
+
+export interface TokenResponse {
+  token: string;
+  detail: string;
+}
+
+export interface RepositoryRequest {
+  namespace: string;
+  name: string;
+}
+
+export interface RepositoryResponse {
+  user: string;
+  name: string;
+  namespace: string;
+  repository_type: string;
+  status: number;
+  status_description: string;
+  description: string;
+  is_private: boolean;
+  is_automated: boolean;
+  can_edit: boolean;
+  star_count: number;
+  pull_count: number;
+  last_updated: string;
+  date_registered: string;
+  collaborator_count: number;
+  affiliation: string;
+  hub_user: string;
+  has_starred: boolean;
+  full_description: string;
+  permissions: {
+    read: boolean;
+    write: boolean;
+    admin: boolean;
+  };
+  media_types: Array<string>;
+  content_types: Array<string>;
+}
+
+export interface RepositoryTagsRequest {
+  namespace: string;
+  name: string;
+  page?: number;
+  page_size?: number;
+}
+
+export interface RepositoryTagsResponse {
+  count: number;
+  next?: string;
+  previous?: string;
+  results: Array<RepositoryTagsResult>;
+}
+
+export interface RepositoryTagsResult {
+  creator: number;
+  id: number;
+  images: Array<RepositoryTagsResultImage>;
+  last_updated: Date;
+  last_updater: number;
+  last_updater_username: string;
+  name: string;
+  repository: number;
+  full_size: number;
+  v2: boolean;
+  tag_status: string;
+  tag_last_pulled: Date;
+  tag_last_pushed: Date;
+  media_type: string;
+  content_type: string;
+  digest: string;
+}
+
+export interface RepositoryTagsResultImage {
+  architecture: string;
+  features: string;
+  variant?: string;
+  digest: string;
+  os: string;
+  os_features: string;
+  os_version?: string;
+  size: number;
+  status: string;
+  last_pulled: Date;
+  last_pushed: Date;
+}
+
+export interface UpdateRepoDescriptionRequest {
+  name: string;
+  namespace: string;
+  description?: string;
+  full_description: string;
+}

src/types/git.ts

@@ -0,0 +1,19 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {Context as GitHubContext} from '@actions/github/lib/context';
+
+export type Context = GitHubContext;

src/types/github.ts

@@ -29,3 +29,8 @@ export type GitHubRepo = OctoOpenApiTypes['schemas']['repository'];
 export interface GitHubActionsRuntimeToken extends JwtPayload {
   ac?: string;
 }
+
+export interface GitHubActionsRuntimeTokenAC {
+  Scope: string;
+  Permission: number;
+}

src/util.ts

@@ -14,11 +14,18 @@
  * limitations under the License.
  */
 
+import fs from 'fs';
 import * as core from '@actions/core';
+import * as io from '@actions/io';
 import {parse} from 'csv-parse/sync';
 
+export interface InputListOpts {
+  ignoreComma?: boolean;
+  quote?: string | boolean | Buffer | null;
+}
+
 export class Util {
-  public static getInputList(name: string, ignoreComma?: boolean): string[] {
+  public static getInputList(name: string, opts?: InputListOpts): string[] {
     const res: Array<string> = [];
 
     const items = core.getInput(name);
@@ -31,18 +38,22 @@ export class Util {
       relaxQuotes: true,
       comment: '#',
       relaxColumnCount: true,
-      skipEmptyLines: true
+      skipEmptyLines: true,
+      quote: opts?.quote
     });
 
     for (const record of records as Array<string[]>) {
       if (record.length == 1) {
-        res.push(record[0]);
-        continue;
-      } else if (!ignoreComma) {
+        if (opts?.ignoreComma) {
+          res.push(record[0]);
+        } else {
+          res.push(...record[0].split(','));
+        }
+      } else if (!opts?.ignoreComma) {
         res.push(...record);
-        continue;
+      } else {
+        res.push(record.join(','));
       }
-      res.push(record.join(','));
     }
 
     return res.filter(item => item).map(pat => pat.trim());
@@ -54,12 +65,49 @@ export class Util {
     }
   }
 
-  public static isValidUrl(url: string): boolean {
+  public static isValidURL(urlStr: string): boolean {
+    let url;
     try {
-      new URL(url);
+      url = new URL(urlStr);
     } catch (e) {
       return false;
     }
-    return true;
+    return url.protocol === 'http:' || url.protocol === 'https:';
+  }
+
+  public static isValidRef(refStr: string): boolean {
+    if (Util.isValidURL(refStr)) {
+      return true;
+    }
+    for (const prefix of ['git://', 'github.com/', 'git@']) {
+      if (refStr.startsWith(prefix)) {
+        return true;
+      }
+    }
+    return false;
+  }
+
+  public static async powershellCommand(script: string, params?: Record<string, string>) {
+    const powershellPath: string = await io.which('powershell', true);
+    const escapedScript = script.replace(/'/g, "''").replace(/"|\n|\r/g, '');
+    const escapedParams: string[] = [];
+    if (params) {
+      for (const key in params) {
+        escapedParams.push(`-${key} '${params[key].replace(/'/g, "''").replace(/"|\n|\r/g, '')}'`);
+      }
+    }
+    return {
+      command: `"${powershellPath}"`,
+      args: ['-NoLogo', '-Sta', '-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Unrestricted', '-Command', `& '${escapedScript}' ${escapedParams.join(' ')}`]
+    };
+  }
+
+  public static isDirectory(p) {
+    try {
+      return fs.lstatSync(p).isDirectory();
+    } catch (_) {
+      // noop
+    }
+    return false;
   }
 }

tsconfig.json

@@ -19,6 +19,6 @@
     "./__tests__/**/*",
     "./lib/**/*",
     "node_modules",
-    "jest.config.ts"
+    "jest.config*.ts"
   ]
 }