Merge pull request #401 from crazy-max/build-warnings-localstate

buildx: convert vertex warnings to github annotations based on localstate
buildx(history): update docker daemon requirement message
2024-07-30 16:03:42 +02:00 · 2024-07-30 15:55:52 +02:00 · 2024-07-30 15:53:00 +02:00 · 2024-07-30 15:52:53 +02:00 · 2024-07-26 16:25:14 +02:00 · 2024-07-26 00:23:55 +00:00
127 changed files with 8801 additions and 2546 deletions
--- a/.eslintrc.json
+++ b/.eslintrc.json
@@ -17,7 +17,7 @@
  ],
  "parser": "@typescript-eslint/parser",
  "parserOptions": {
-    "ecmaVersion": "2023",
+    "ecmaVersion": 2023,
    "sourceType": "module"
  },
  "plugins": [
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,2 +1,3 @@
 /.yarn/releases/** binary
 /.yarn/plugins/** binary
+/__tests__/fixtures/oci-archive/** binary
--- a/.github/buildx-lab-releases.json
+++ b/.github/buildx-lab-releases.json
@@ -1,43 +1,330 @@
 {
  "latest": {
-    "id": 123496811,
-    "tag_name": "v0.11.2-desktop.5",
-    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.11.2-desktop.5",
+    "id": 161492089,
+    "tag_name": "v0.15.1-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.15.1-desktop.1",
    "assets": [
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-amd64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v6",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v7",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-ppc64le",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-riscv64",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-s390x",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-amd64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-arm64.exe",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/buildx-v0.11.2-desktop.5.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx-desktop/releases/download/v0.11.2-desktop.5/checksums.txt"
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/checksums.txt"
+    ]
+  },
+  "v0.15.1-desktop.1": {
+    "id": 161492089,
+    "tag_name": "v0.15.1-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.15.1-desktop.1",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/buildx-v0.15.1-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.1-desktop.1/checksums.txt"
+    ]
+  },
+  "v0.15.0-desktop.1": {
+    "id": 160473592,
+    "tag_name": "v0.15.0-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.15.0-desktop.1",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/buildx-v0.15.0-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.15.0-desktop.1/checksums.txt"
+    ]
+  },
+  "v0.14.1-desktop.1": {
+    "id": 157588052,
+    "tag_name": "v0.14.1-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.14.1-desktop.1",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/buildx-v0.14.1-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.1-desktop.1/checksums.txt"
+    ]
+  },
+  "v0.14.0-desktop.1": {
+    "id": 155523887,
+    "tag_name": "v0.14.0-desktop.1",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.14.0-desktop.1",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/buildx-v0.14.0-desktop.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.14.0-desktop.1/checksums.txt"
+    ]
+  },
+  "v0.13.1-desktop-preview.2": {
+    "id": 151417247,
+    "tag_name": "v0.13.1-desktop-preview.2",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.13.1-desktop-preview.2",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/buildx-v0.13.1-desktop-preview.2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.13.1-desktop-preview.2/checksums.txt"
+    ]
+  },
+  "v0.12.1-desktop.4": {
+    "id": 137689487,
+    "tag_name": "v0.12.1-desktop.4",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.12.1-desktop.4",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/buildx-v0.12.1-desktop.4.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.4/checksums.txt"
+    ]
+  },
+  "v0.12.1-desktop.3": {
+    "id": 137560191,
+    "tag_name": "v0.12.1-desktop.3",
+    "html_url": "https://github.com/docker/buildx-desktop/releases/tag/v0.12.1-desktop.3",
+    "assets": [
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.darwin-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.darwin-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-amd64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm-v6",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm-v7",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-ppc64le",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-riscv64",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-s390x",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.windows-amd64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.windows-arm64.exe",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/buildx-v0.12.1-desktop.3.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx-desktop/releases/download/v0.12.1-desktop.3/checksums.txt"
    ]
  },
  "v0.12.0-desktop.2": {
--- a/.github/buildx-releases.json
+++ b/.github/buildx-releases.json
@@ -1,43 +1,781 @@
 {
  "latest": {
-    "id": 129855827,
-    "tag_name": "v0.12.0",
-    "html_url": "https://github.com/docker/buildx/releases/tag/v0.12.0",
+    "id": 167152950,
+    "tag_name": "v0.16.2",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.16.2",
    "assets": [
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.darwin-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.darwin-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v6",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v7",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-ppc64le",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-riscv64",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-s390x",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.windows-amd64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.windows-arm64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.12.0/checksums.txt"
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/checksums.txt"
+    ]
+  },
+  "v0.16.2": {
+    "id": 167152950,
+    "tag_name": "v0.16.2",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.16.2",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/buildx-v0.16.2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.2/checksums.txt"
+    ]
+  },
+  "v0.16.1": {
+    "id": 166111587,
+    "tag_name": "v0.16.1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.16.1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/buildx-v0.16.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.1/checksums.txt"
+    ]
+  },
+  "v0.16.0": {
+    "id": 165067169,
+    "tag_name": "v0.16.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.16.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/buildx-v0.16.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0/checksums.txt"
+    ]
+  },
+  "v0.16.0-rc2": {
+    "id": 164893757,
+    "tag_name": "v0.16.0-rc2",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.16.0-rc2",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/buildx-v0.16.0-rc2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc2/checksums.txt"
+    ]
+  },
+  "v0.16.0-rc1": {
+    "id": 163887606,
+    "tag_name": "v0.16.0-rc1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.16.0-rc1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/buildx-v0.16.0-rc1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.16.0-rc1/checksums.txt"
+    ]
+  },
+  "v0.15.1": {
+    "id": 161126938,
+    "tag_name": "v0.15.1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.15.1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/buildx-v0.15.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.1/checksums.txt"
+    ]
+  },
+  "v0.15.0": {
+    "id": 159941316,
+    "tag_name": "v0.15.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.15.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/buildx-v0.15.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0/checksums.txt"
+    ]
+  },
+  "v0.15.0-rc2": {
+    "id": 159285616,
+    "tag_name": "v0.15.0-rc2",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.15.0-rc2",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/buildx-v0.15.0-rc2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc2/checksums.txt"
+    ]
+  },
+  "v0.15.0-rc1": {
+    "id": 158684634,
+    "tag_name": "v0.15.0-rc1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.15.0-rc1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/buildx-v0.15.0-rc1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.15.0-rc1/checksums.txt"
+    ]
+  },
+  "v0.14.1": {
+    "id": 156924662,
+    "tag_name": "v0.14.1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.14.1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/buildx-v0.14.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.1/checksums.txt"
+    ]
+  },
+  "v0.14.0": {
+    "id": 151768856,
+    "tag_name": "v0.14.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.14.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/buildx-v0.14.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0/checksums.txt"
+    ]
+  },
+  "v0.14.0-rc2": {
+    "id": 151606490,
+    "tag_name": "v0.14.0-rc2",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.14.0-rc2",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/buildx-v0.14.0-rc2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc2/checksums.txt"
+    ]
+  },
+  "v0.14.0-rc1": {
+    "id": 150784571,
+    "tag_name": "v0.14.0-rc1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.14.0-rc1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/buildx-v0.14.0-rc1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.14.0-rc1/checksums.txt"
+    ]
+  },
+  "v0.13.1": {
+    "id": 146098987,
+    "tag_name": "v0.13.1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.13.1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/buildx-v0.13.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.1/checksums.txt"
+    ]
+  },
+  "v0.13.0": {
+    "id": 144928424,
+    "tag_name": "v0.13.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.13.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/buildx-v0.13.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0/checksums.txt"
+    ]
+  },
+  "v0.13.0-rc2": {
+    "id": 144109355,
+    "tag_name": "v0.13.0-rc2",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.13.0-rc2",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/buildx-v0.13.0-rc2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc2/checksums.txt"
+    ]
+  },
+  "v0.13.0-rc1": {
+    "id": 143461510,
+    "tag_name": "v0.13.0-rc1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.13.0-rc1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/buildx-v0.13.0-rc1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.13.0-rc1/checksums.txt"
+    ]
+  },
+  "v0.12.1": {
+    "id": 136761257,
+    "tag_name": "v0.12.1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.12.1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/buildx-v0.12.1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.12.1/checksums.txt"
    ]
  },
  "v0.12.0": {
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,6 +14,10 @@ updates:
    versioning-strategy: "increase"
    allow:
      - dependency-type: "production"
+    ignore:
+      - # we want to match the same version as the one used by @actions/artifact
+        # https://github.com/actions/toolkit/blob/ae38557bb0dba824cdda26ce787bd6b66cf07a83/packages/artifact/package.json#L46
+        dependency-name: "@azure/storage-blob"
    labels:
      - "dependencies"
      - "bot"
--- a/.github/docker-releases.json
+++ b/.github/docker-releases.json
@@ -1,8 +1,242 @@
 {
  "latest": {
-    "id": 126933125,
-    "tag_name": "v24.0.7",
-    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.7",
+    "id": 166797236,
+    "tag_name": "v27.1.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.1.1",
+    "assets": []
+  },
+  "v25.0.6": {
+    "id": 167195013,
+    "tag_name": "v25.0.6",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.6",
+    "assets": []
+  },
+  "v27.1.1": {
+    "id": 166797236,
+    "tag_name": "v27.1.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.1.1",
+    "assets": []
+  },
+  "v26.1.5": {
+    "id": 166954867,
+    "tag_name": "v26.1.5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.1.5",
+    "assets": []
+  },
+  "v27.1.0": {
+    "id": 166495917,
+    "tag_name": "v27.1.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.1.0",
+    "assets": []
+  },
+  "v27.0.3": {
+    "id": 163311279,
+    "tag_name": "v27.0.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.0.3",
+    "assets": []
+  },
+  "v27.0.2": {
+    "id": 162600493,
+    "tag_name": "v27.0.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.0.2",
+    "assets": []
+  },
+  "v27.0.1": {
+    "id": 162009909,
+    "tag_name": "v27.0.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.0.1",
+    "assets": []
+  },
+  "v27.0.1-rc.1": {
+    "id": 161457618,
+    "tag_name": "v27.0.1-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.0.1-rc.1",
+    "assets": []
+  },
+  "v23.0.13": {
+    "id": 161533551,
+    "tag_name": "v23.0.13",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.13",
+    "assets": []
+  },
+  "v27.0.0-rc.2": {
+    "id": 160534078,
+    "tag_name": "v27.0.0-rc.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.0.0-rc.2",
+    "assets": []
+  },
+  "v27.0.0-rc.1": {
+    "id": 160112985,
+    "tag_name": "v27.0.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v27.0.0-rc.1",
+    "assets": []
+  },
+  "v26.1.4": {
+    "id": 159031384,
+    "tag_name": "v26.1.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.1.4",
+    "assets": []
+  },
+  "v23.0.12": {
+    "id": 158038616,
+    "tag_name": "v23.0.12",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.12",
+    "assets": []
+  },
+  "v26.1.3": {
+    "id": 155867714,
+    "tag_name": "v26.1.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.1.3",
+    "assets": []
+  },
+  "v26.1.2": {
+    "id": 154733361,
+    "tag_name": "v26.1.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.1.2",
+    "assets": []
+  },
+  "v23.0.11": {
+    "id": 154425437,
+    "tag_name": "v23.0.11",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.11",
+    "assets": []
+  },
+  "v26.1.1": {
+    "id": 153294610,
+    "tag_name": "v26.1.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.1.1",
+    "assets": []
+  },
+  "v26.1.0": {
+    "id": 149919896,
+    "tag_name": "v26.1.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.1.0",
+    "assets": []
+  },
+  "v26.0.2": {
+    "id": 151768426,
+    "tag_name": "v26.0.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.0.2",
+    "assets": []
+  },
+  "v26.0.1": {
+    "id": 149921469,
+    "tag_name": "v26.0.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.0.1",
+    "assets": []
+  },
+  "v23.0.10": {
+    "id": 147776752,
+    "tag_name": "v23.0.10",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.10",
+    "assets": []
+  },
+  "v26.0.0": {
+    "id": 145844215,
+    "tag_name": "v26.0.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.0.0",
+    "assets": []
+  },
+  "v26.0.0-rc3": {
+    "id": 146688910,
+    "tag_name": "v26.0.0-rc3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.0.0-rc3",
+    "assets": []
+  },
+  "v25.0.5": {
+    "id": 147202747,
+    "tag_name": "v25.0.5",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.5",
+    "assets": []
+  },
+  "v26.0.0-rc2": {
+    "id": 144926580,
+    "tag_name": "v26.0.0-rc2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.0.0-rc2",
+    "assets": []
+  },
+  "v25.0.4": {
+    "id": 144022554,
+    "tag_name": "v25.0.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.4",
+    "assets": []
+  },
+  "v26.0.0-rc1": {
+    "id": 142822675,
+    "tag_name": "v26.0.0-rc1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v26.0.0-rc1",
+    "assets": []
+  },
+  "v25.0.3": {
+    "id": 140187402,
+    "tag_name": "v25.0.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.3",
+    "assets": []
+  },
+  "v25.0.2": {
+    "id": 139426676,
+    "tag_name": "v25.0.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.2",
+    "assets": []
+  },
+  "v24.0.9": {
+    "id": 139508924,
+    "tag_name": "v24.0.9",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.9",
+    "assets": []
+  },
+  "v23.0.9": {
+    "id": 139233691,
+    "tag_name": "v23.0.9",
+    "html_url": "https://github.com/moby/moby/releases/tag/v23.0.9",
+    "assets": []
+  },
+  "v24.0.8": {
+    "id": 138593185,
+    "tag_name": "v24.0.8",
+    "html_url": "https://github.com/moby/moby/releases/tag/v24.0.8",
+    "assets": []
+  },
+  "v25.0.1": {
+    "id": 138305010,
+    "tag_name": "v25.0.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.1",
+    "assets": []
+  },
+  "v25.0.0": {
+    "id": 137711983,
+    "tag_name": "v25.0.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0",
+    "assets": []
+  },
+  "v25.0.0-rc.3": {
+    "id": 137464931,
+    "tag_name": "v25.0.0-rc.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0-rc.3",
+    "assets": []
+  },
+  "v25.0.0-rc.2": {
+    "id": 136912066,
+    "tag_name": "v25.0.0-rc.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0-rc.2",
+    "assets": []
+  },
+  "v25.0.0-rc.1": {
+    "id": 135904442,
+    "tag_name": "v25.0.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0-rc.1",
+    "assets": []
+  },
+  "v25.0.0-beta.3": {
+    "id": 134782996,
+    "tag_name": "v25.0.0-beta.3",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0-beta.3",
+    "assets": []
+  },
+  "v25.0.0-beta.2": {
+    "id": 133659834,
+    "tag_name": "v25.0.0-beta.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/v25.0.0-beta.2",
    "assets": []
  },
  "v23.0.8": {
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -21,6 +21,6 @@ jobs:
        uses: actions/checkout@v4
      -
        name: Build
-        uses: docker/bake-action@v4
+        uses: docker/bake-action@v5
        with:
          targets: build
--- a/.github/workflows/buildx-lab-releases-json.yml
+++ b/.github/workflows/buildx-lab-releases-json.yml
@@ -12,12 +12,12 @@ on:
    branches:
      - 'main'
  pull_request:
-    paths-ignore:
-      - '.github/*-releases.json'
+    paths:
+      - '.github/workflows/buildx-lab-releases-json.yml'

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@6dc31870ca6c4f8489bf5a408ab38fae60f47eec
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@fa6141aedf23596fb8bdcceab9cce8dadaa31bd9
    with:
      repository: docker/buildx-desktop
      artifact_name: buildx-lab-releases-json
@@ -35,7 +35,7 @@ jobs:
        uses: actions/checkout@v4
      -
        name: Download
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
        with:
          name: buildx-lab-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38
+        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c  # v6.1.0
        with:
          base: main
          branch: bot/buildx-lab-releases-json
--- a/.github/workflows/buildx-releases-json.yml
+++ b/.github/workflows/buildx-releases-json.yml
@@ -12,12 +12,12 @@ on:
    branches:
      - 'main'
  pull_request:
-    paths-ignore:
-      - '.github/*-releases.json'
+    paths:
+      - '.github/workflows/buildx-releases-json.yml'

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@6dc31870ca6c4f8489bf5a408ab38fae60f47eec
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@fa6141aedf23596fb8bdcceab9cce8dadaa31bd9
    with:
      repository: docker/buildx
      artifact_name: buildx-releases-json
@@ -35,7 +35,7 @@ jobs:
        uses: actions/checkout@v4
      -
        name: Download
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
        with:
          name: buildx-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38
+        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c  # v6.1.0
        with:
          base: main
          branch: bot/buildx-releases-json
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -21,6 +21,11 @@ jobs:
      -
        name: Checkout
        uses: actions/checkout@v4
+      -
+        name: Enable corepack
+        run: |
+          corepack enable
+          yarn --version
      -
        name: Set up Node
        uses: actions/setup-node@v4
@@ -28,14 +33,14 @@ jobs:
          node-version: ${{ env.NODE_VERSION }}
      -
        name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
        with:
          languages: javascript-typescript
      -
        name: Autobuild
-        uses: github/codeql-action/autobuild@v2
+        uses: github/codeql-action/autobuild@v3
      -
        name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3
        with:
          category: "/language:javascript-typescript"
--- a/.github/workflows/docker-releases-json.yml
+++ b/.github/workflows/docker-releases-json.yml
@@ -12,12 +12,12 @@ on:
    branches:
      - 'main'
  pull_request:
-    paths-ignore:
-      - '.github/*-releases.json'
+    paths:
+      - '.github/workflows/docker-releases-json.yml'

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@6dc31870ca6c4f8489bf5a408ab38fae60f47eec
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@fa6141aedf23596fb8bdcceab9cce8dadaa31bd9
    with:
      repository: moby/moby
      artifact_name: docker-releases-json
@@ -35,7 +35,7 @@ jobs:
        uses: actions/checkout@v4
      -
        name: Download
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
        with:
          name: docker-releases-json
          path: .github
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38
+        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c  # v6.1.0
        with:
          base: main
          branch: bot/docker-releases-json
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -21,7 +21,7 @@ jobs:
        uses: docker/setup-buildx-action@v3
      -
        name: Publish
-        uses: docker/bake-action@v4
+        uses: docker/bake-action@v5
        with:
          targets: publish
        env:
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -15,6 +15,8 @@ on:

 env:
  NODE_VERSION: "20"
+  BUILDX_VERSION: "v0.16.2"
+  BUILDKIT_IMAGE: "moby/buildkit:v0.15.1"

 jobs:
  test:
@@ -25,17 +27,28 @@ jobs:
        uses: actions/checkout@v4
      -
        name: Test
-        uses: docker/bake-action@v4
+        uses: docker/bake-action@v5
        with:
          targets: test-coverage
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      -
+        name: Check coverage
+        run: |
+          if [ -f ./coverage/clover.xml ] && [ ! -f ./coverage/allSkipped.txt ]; then
+            echo "RUN_CODECOV=true" >> $GITHUB_ENV
+          else
+            echo "RUN_CODECOV=false" >> $GITHUB_ENV
+          fi
+        shell: bash
      -
        name: Upload coverage
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v4
+        if: env.RUN_CODECOV == 'true'
        with:
          file: ./coverage/clover.xml
          flags: unit
+          token: ${{ secrets.CODECOV_TOKEN }}

  prepare-itg:
    runs-on: ubuntu-latest
@@ -45,6 +58,11 @@ jobs:
      -
        name: Checkout
        uses: actions/checkout@v4
+      -
+        name: Enable corepack
+        run: |
+          corepack enable
+          yarn --version
      -
        name: Setup Node
        uses: actions/setup-node@v4
@@ -78,37 +96,76 @@ jobs:
        test: ${{ fromJson(needs.prepare-itg.outputs.matrix) }}
        os:
          - ubuntu-latest
+          #- macos-14  # no virt: https://github.com/docker/actions-toolkit/issues/317
          - macos-13
-          - macos-latest
+          - macos-12
          - windows-latest
-        exclude:
-          - os: macos-13
-            test: buildx/bake.test.itg.ts
-          - os: macos-latest
-            test: buildx/bake.test.itg.ts
-          - os: windows-latest
-            test: buildx/bake.test.itg.ts
    steps:
      -
        name: Checkout
        uses: actions/checkout@v4
+      -
+        name: Expose GitHub Runtime
+        uses: crazy-max/ghaction-github-runtime@v3
+      -
+        # FIXME: Needs to setup node twice on Windows due to a bug with runner
+        name: Setup Node
+        if: startsWith(matrix.os, 'windows')
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+      -
+        name: Enable corepack
+        run: |
+          corepack enable
+          yarn --version
      -
        name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'yarn'
+      -
+        name: Set up Docker Buildx
+        if: startsWith(matrix.os, 'ubuntu')
+        uses: docker/setup-buildx-action@v3
+        with:
+          version: ${{ env.BUILDX_VERSION }}
+          driver: docker
+      -
+        name: Set up container builder
+        if: startsWith(matrix.os, 'ubuntu')
+        id: builder
+        uses: docker/setup-buildx-action@v3
+        with:
+          version: ${{ env.BUILDX_VERSION }}
+          driver-opts: image=${{ env.BUILDKIT_IMAGE }}
+          use: false
      -
        name: Install
        run: yarn install
      -
        name: Test
-        run: yarn test:itg-coverage --runTestsByPath __tests__/${{ matrix.test }} --coverageDirectory=./coverage
+        run: |
+          yarn test:itg-coverage --runTestsByPath __tests__/${{ matrix.test }} --coverageDirectory=./coverage
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          CTN_BUILDER_NAME: ${{ steps.builder.outputs.name }}
+          TEST_FOR_SUMMARY: ${{ secrets.TEST_FOR_SUMMARY }}
+      -
+        name: Check coverage
+        run: |
+          if [ -f ./coverage/clover.xml ] && [ ! -f ./coverage/allSkipped.txt ]; then
+            echo "RUN_CODECOV=true" >> $GITHUB_ENV
+          else
+            echo "RUN_CODECOV=false" >> $GITHUB_ENV
+          fi
+        shell: bash
      -
        name: Upload coverage
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v4
+        if: env.RUN_CODECOV == 'true'
        with:
          file: ./coverage/clover.xml
          flags: itg
+          token: ${{ secrets.CODECOV_TOKEN }}
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -42,6 +42,6 @@ jobs:
        uses: actions/checkout@v4
      -
        name: Validate
-        uses: docker/bake-action@v4
+        uses: docker/bake-action@v5
        with:
          targets: ${{ matrix.target }}
--- a/.github/workflows/virtual-env.yml
+++ b/.github/workflows/virtual-env.yml
@@ -21,6 +21,7 @@ jobs:
      matrix:
        os:
          - ubuntu-latest
+          - ubuntu-24.04
          - ubuntu-22.04
          - ubuntu-20.04
    steps:
@@ -42,7 +43,7 @@ jobs:
      -
        name: Docker daemon conf
        run: |
-          cat /etc/docker/daemon.json
+          cat /etc/docker/daemon.json || true
      -
        name: Docker info
        run: docker info
--- a/.yarn/releases/yarn-3.6.3.cjs
+++ b/.yarn/releases/yarn-3.6.3.cjs
--- a/.yarnrc.yml
+++ b/.yarnrc.yml
@@ -1,6 +1,8 @@
 logFilters:
  - code: YN0013
    level: discard
+  - code: YN0019
+    level: discard
  - code: YN0076
    level: discard

@@ -11,5 +13,3 @@ npmAuthToken: "${NODE_AUTH_TOKEN:-fallback}"
 plugins:
  - path: .yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
    spec: "@yarnpkg/plugin-interactive-tools"
-
-yarnPath: .yarn/releases/yarn-3.6.3.cjs
--- a/mocks/@actions/github.ts
+++ b/mocks/@actions/github.ts
@@ -22,7 +22,8 @@ export const context = {
    repo: 'actions-toolkit'
  },
  ref: 'refs/heads/master',
-  runId: 123,
+  runId: 2188748038,
+  runNumber: 15,
  payload: {
    after: '860c1904a1ce19322e91ac35af1ab07466440c37',
    base_ref: null,
--- a/tests/buildkit/buildkit.test.ts
+++ b/tests/buildkit/buildkit.test.ts
@@ -14,16 +14,12 @@
 * limitations under the License.
 */

-import {beforeEach, describe, expect, it, jest, test} from '@jest/globals';
+import {describe, expect, it, jest, test} from '@jest/globals';

 import {BuildKit} from '../../src/buildkit/buildkit';
 import {Builder} from '../../src/buildx/builder';

-import {BuilderInfo} from '../../src/types/builder';
-
-beforeEach(() => {
-  jest.clearAllMocks();
-});
+import {BuilderInfo} from '../../src/types/buildx/builder';

 jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<BuilderInfo> => {
  return {
--- a/tests/buildkit/config.test.ts
+++ b/tests/buildkit/config.test.ts
@@ -14,7 +14,7 @@
 * limitations under the License.
 */

-import {describe, expect, jest, test, beforeEach, afterEach} from '@jest/globals';
+import {describe, expect, jest, test, afterEach} from '@jest/globals';
 import * as fs from 'fs';
 import * as path from 'path';
 import * as rimraf from 'rimraf';
@@ -38,10 +38,6 @@ jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
  return tmpName;
 });

-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
 afterEach(() => {
  rimraf.sync(tmpDir);
 });
--- a/tests/buildkit/git.test.ts
+++ b/tests/buildkit/git.test.ts
@@ -0,0 +1,344 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {beforeEach, describe, expect, jest, test} from '@jest/globals';
+
+import {Git} from '../../src/buildkit/git';
+
+import {GitRef, GitURL} from '../../src/types/buildkit/git';
+
+beforeEach(() => {
+  jest.restoreAllMocks();
+});
+
+describe('parseURL', () => {
+  // prettier-ignore
+  test.each([
+    [
+      'http://github.com/moby/buildkit',
+      {
+        scheme: 'http',
+        host: 'github.com',
+        path: '/moby/buildkit'
+      } as GitURL,
+      false
+    ],
+    [
+      'https://github.com/moby/buildkit',
+      {
+        scheme: 'https',
+        host: 'github.com',
+        path: '/moby/buildkit'
+      } as GitURL,
+      false
+    ],
+    [
+      'http://github.com/moby/buildkit#v1.0.0',
+      {
+        scheme: 'http',
+        host: 'github.com',
+        path: '/moby/buildkit',
+        fragment: {
+          ref: 'v1.0.0',
+        }
+      } as GitURL,
+      false
+    ],
+    [
+      'http://github.com/moby/buildkit#v1.0.0:subdir',
+      {
+        scheme: 'http',
+        host: 'github.com',
+        path: '/moby/buildkit',
+        fragment: {
+          ref: 'v1.0.0',
+          subdir: 'subdir'
+        }
+      } as GitURL,
+      false
+    ],
+    [
+      'http://foo:bar@github.com/moby/buildkit#v1.0.0',
+      {
+        scheme: 'http',
+        host: 'github.com',
+        path: '/moby/buildkit',
+        fragment: {
+          ref: 'v1.0.0',
+        },
+        user: {
+          username: 'foo',
+          password: 'bar',
+          passwordSet: true
+        }
+      } as GitURL,
+      false
+    ],
+    [
+      'ssh://git@github.com/moby/buildkit.git',
+      {
+        scheme: 'ssh',
+        host: 'github.com',
+        path: '/moby/buildkit.git',
+        user: {
+          username: 'git',
+          password: '',
+          passwordSet: false
+        }
+      } as GitURL,
+      false
+    ],
+    [
+      'ssh://git@github.com:22/moby/buildkit.git',
+      {
+        scheme: 'ssh',
+        host: 'github.com:22',
+        path: '/moby/buildkit.git',
+        user: {
+          username: 'git',
+          password: '',
+          passwordSet: false
+        }
+      } as GitURL,
+      false
+    ],
+    // TODO: handle SCP-style URLs
+    // [
+    //   'git@github.com:moby/buildkit.git',
+    //   {
+    //     scheme: 'ssh',
+    //     host: 'github.com:22',
+    //     path: 'moby/buildkit.git',
+    //     user: {
+    //       username: 'git',
+    //       password: '',
+    //       passwordSet: false
+    //     }
+    //   } as GitURL,
+    //   false
+    // ],
+    [
+      'ssh://root@subdomain.example.hostname:2222/root/my/really/weird/path/foo.git',
+      {
+        scheme: 'ssh',
+        host: 'subdomain.example.hostname:2222',
+        path: '/root/my/really/weird/path/foo.git',
+        user: {
+          username: 'root',
+          password: '',
+          passwordSet: false
+        }
+      } as GitURL,
+      false
+    ],
+    [
+      'git://host.xz:1234/path/to/repo.git',
+      {
+        scheme: 'git',
+        host: 'host.xz:1234',
+        path: '/path/to/repo.git',
+      } as GitURL,
+      false
+    ],
+    [
+      'ssh://someuser@192.168.0.123:456/~/repo-in-my-home-dir.git',
+      {
+        scheme: 'ssh',
+        host: '192.168.0.123:456',
+        path: '/~/repo-in-my-home-dir.git',
+        user: {
+          username: 'someuser',
+          password: '',
+          passwordSet: false
+        }
+      } as GitURL,
+      false
+    ],
+    [
+      'httpx://github.com/moby/buildkit',
+      {} as GitURL,
+      true
+    ],
+    [
+      'HTTP://github.com/moby/buildkit',
+      {
+        scheme: 'http',
+        host: 'github.com',
+        path: '/moby/buildkit'
+      } as GitURL,
+      false
+    ],
+  ])('given %p', async (ref: string, expected: GitURL, expectedErr: boolean) => {
+    try {
+      const got = Git.parseURL(ref);
+      expect(got.scheme).toEqual(expected.scheme);
+      expect(got.host).toEqual(expected.host);
+      expect(got.path).toEqual(expected.path);
+      expect(got.fragment).toEqual(expected.fragment);
+      expect(got.user?.username).toEqual(expected.user?.username);
+      expect(got.user?.password).toEqual(expected.user?.password);
+      expect(got.user?.passwordSet).toEqual(expected.user?.passwordSet);
+    } catch (err) {
+      if (!expectedErr) {
+        console.log(err);
+      }
+      // eslint-disable-next-line jest/no-conditional-expect
+      expect(expectedErr).toBeTruthy();
+    }
+  });
+});
+
+describe('parseRef', () => {
+  // prettier-ignore
+  test.each([
+    [
+      'https://example.com/',
+      undefined
+    ],
+    [
+      'https://example.com/foo',
+      undefined
+    ],
+    [
+      'https://example.com/foo.git',
+      {
+        remote: 'https://example.com/foo.git',
+        shortName: 'foo'
+      } as GitRef
+    ],
+    [
+      'https://example.com/foo.git#deadbeef',
+      {
+        remote: 'https://example.com/foo.git',
+        shortName: 'foo',
+        commit: 'deadbeef'
+      } as GitRef
+    ],
+    [
+      'https://example.com/foo.git#release/1.2',
+      {
+        remote: 'https://example.com/foo.git',
+        shortName: 'foo',
+        commit: 'release/1.2'
+      } as GitRef
+    ],
+    [
+      'https://example.com/foo.git/',
+      undefined
+    ],
+    [
+      'https://example.com/foo.git.bar',
+      undefined
+    ],
+    [
+      'git://example.com/foo',
+      {
+        remote: 'git://example.com/foo',
+        shortName: 'foo',
+        unencryptedTCP: true
+      } as GitRef
+    ],
+    [
+      'github.com/moby/buildkit',
+      {
+        remote: 'github.com/moby/buildkit',
+        shortName: 'buildkit',
+        indistinguishableFromLocal: true
+      } as GitRef
+    ],
+    [
+      'custom.xyz/moby/buildkit.git',
+      undefined
+    ],
+    [
+      'https://github.com/moby/buildkit',
+      undefined
+    ],
+    [
+      'https://github.com/moby/buildkit.git',
+      {
+        remote: 'https://github.com/moby/buildkit.git',
+        shortName: 'buildkit',
+      } as GitRef
+    ],
+    [
+      'https://foo:bar@github.com/moby/buildkit.git',
+      {
+        remote: 'https://foo:bar@github.com/moby/buildkit.git',
+        shortName: 'buildkit',
+      } as GitRef
+    ],
+    // TODO handle SCP-style URLs
+    // [
+    //   'git@github.com:moby/buildkit',
+    //   {
+    //     remote: 'git@github.com:moby/buildkit',
+    //     shortName: 'buildkit',
+    //   } as GitRef
+    // ],
+    // [
+    //   'git@github.com:moby/buildkit.git',
+    //   {
+    //     remote: 'git@github.com:moby/buildkit',
+    //     shortName: 'buildkit',
+    //   } as GitRef
+    // ],
+    // [
+    //   'git@bitbucket.org:atlassianlabs/atlassian-docker.git',
+    //   {
+    //     remote: 'git@bitbucket.org:atlassianlabs/atlassian-docker.git',
+    //     shortName: 'atlassian-docker',
+    //   } as GitRef
+    // ],
+    [
+      'https://github.com/foo/bar.git#baz/qux:quux/quuz',
+      {
+        remote: 'https://github.com/foo/bar.git',
+        shortName: 'bar',
+        commit: 'baz/qux',
+        subDir: 'quux/quuz',
+      } as GitRef
+    ],
+    [
+      'https://github.com/docker/docker.git#:myfolder',
+      {
+        remote: 'https://github.com/docker/docker.git',
+        shortName: 'docker',
+        subDir: 'myfolder',
+        commit: ''
+      } as GitRef
+    ],
+    [
+      './.git',
+      undefined
+    ],
+    [
+      '.git',
+      undefined
+    ],
+  ])('given %p', async (ref: string, expected: GitRef | undefined) => {
+    try {
+      const got = Git.parseRef(ref);
+      expect(got).toEqual(expected);
+    } catch (err) {
+      if (expected) {
+        console.log(err);
+      }
+      // eslint-disable-next-line jest/no-conditional-expect
+      expect(expected).toBeUndefined();
+    }
+  });
+});
--- a/tests/buildx/bake.test.itg.ts
+++ b/tests/buildx/bake.test.itg.ts
@@ -14,30 +14,45 @@
 * limitations under the License.
 */

-import {beforeEach, describe, expect, jest, test} from '@jest/globals';
+import {describe, expect, test} from '@jest/globals';
 import * as fs from 'fs';
 import * as path from 'path';

 import {Bake} from '../../src/buildx/bake';
-import {BakeDefinition} from '../../src/types/bake';
+import {BakeDefinition} from '../../src/types/buildx/bake';

 const fixturesDir = path.join(__dirname, '..', 'fixtures');

-beforeEach(() => {
-  jest.clearAllMocks();
-});
+const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;

-describe('parseDefinitions', () => {
+maybe('getDefinition', () => {
  // prettier-ignore
  test.each([
    [
-      ['https://github.com/docker/buildx.git#v0.10.4'],
+      'https://github.com/docker/buildx.git#v0.10.4',
      ['binaries-cross'],
-      path.join(fixturesDir, 'bake-buildx-0.10.4-binaries-cross.json')
-    ]
-  ])('given %p', async (sources: string[], targets: string[], out: string) => {
+      path.join(fixturesDir, 'bake-buildx-0.10.4-binaries-cross.json'),
+      false,
+    ],
+    // TODO: uncomment this test case when we have access to the private repo using an access token
+    // [
+    //   'https://github.com/docker/test-docker-action.git#remote-private',
+    //   ['default'],
+    //   path.join(fixturesDir, 'bake-test-docker-action-remote-private.json'),
+    //   true,
+    // ]
+  ])('given %p', async (source: string, targets: string[], out: string, auth) => {
+    const gitAuthToken = process.env.GITHUB_TOKEN || '';
+    if (auth && !gitAuthToken) {
+      console.log(`Git auth token not available, skipping test`);
+      return;
+    }
    const bake = new Bake();
    const expectedDef = <BakeDefinition>JSON.parse(fs.readFileSync(out, {encoding: 'utf-8'}).trim())
-    expect(await bake.parseDefinitions(sources, targets)).toEqual(expectedDef);
+    expect(await bake.getDefinition({
+      source: source,
+      targets: targets,
+      githubToken: gitAuthToken,
+    })).toEqual(expectedDef);
  });
 });
--- a/tests/buildx/bake.test.ts
+++ b/tests/buildx/bake.test.ts
@@ -14,44 +14,94 @@
 * limitations under the License.
 */

-import {beforeEach, describe, expect, jest, test} from '@jest/globals';
+import {afterEach, describe, expect, it, jest, test} from '@jest/globals';
 import * as fs from 'fs';
 import * as path from 'path';
+import * as rimraf from 'rimraf';

 import {Bake} from '../../src/buildx/bake';
-import {BakeDefinition} from '../../src/types/bake';
+import {Context} from '../../src/context';
+
+import {ExecOptions} from '@actions/exec';
+import {BakeDefinition} from '../../src/types/buildx/bake';
+import {BuildMetadata} from '../../src/types/buildx/build';

 const fixturesDir = path.join(__dirname, '..', 'fixtures');
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-inputs-jest');
+const tmpName = path.join(tmpDir, '.tmpname-jest');
+const metadata: BuildMetadata = {
+  app: {
+    'buildx.build.ref': 'default/default/7frbdw1fmfozgtqavghowsepk'
+  },
+  db: {
+    'buildx.build.ref': 'default/default/onic7g2axylf56rxetob7qruy'
+  }
+};

-beforeEach(() => {
-  jest.clearAllMocks();
+jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
+  if (!fs.existsSync(tmpDir)) {
+    fs.mkdirSync(tmpDir, {recursive: true});
+  }
+  return tmpDir;
 });

-describe('parseDefinitions', () => {
+jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
+  return tmpName;
+});
+
+afterEach(() => {
+  rimraf.sync(tmpDir);
+});
+
+describe('resolveMetadata', () => {
+  it('matches', async () => {
+    const bake = new Bake();
+    fs.writeFileSync(bake.getMetadataFilePath(), JSON.stringify(metadata));
+    expect(bake.resolveMetadata()).toEqual(metadata as BuildMetadata);
+  });
+});
+
+describe('resolveRefs', () => {
+  it('matches', async () => {
+    const bake = new Bake();
+    fs.writeFileSync(bake.getMetadataFilePath(), JSON.stringify(metadata));
+    expect(bake.resolveRefs()).toEqual(['default/default/7frbdw1fmfozgtqavghowsepk', 'default/default/onic7g2axylf56rxetob7qruy']);
+  });
+});
+
+describe('getDefinition', () => {
  // prettier-ignore
  test.each([
    [
      [path.join(fixturesDir, 'bake-01.hcl')],
      ['validate'],
      [],
+      {silent: true},
      path.join(fixturesDir, 'bake-01-validate.json')
    ],
    [
      [path.join(fixturesDir, 'bake-02.hcl')],
      ['build'],
      [],
+      undefined,
      path.join(fixturesDir, 'bake-02-build.json')
    ],
    [
      [path.join(fixturesDir, 'bake-01.hcl')],
      ['image'],
      ['*.output=type=docker', '*.platform=linux/amd64'],
+      undefined,
      path.join(fixturesDir, 'bake-01-overrides.json')
    ]
-  ])('given %p', async (sources: string[], targets: string[], overrides: string[], out: string) => {
+  ])('given %p', async (files: string[], targets: string[], overrides: string[], execOptions: ExecOptions | undefined, out: string) => {
    const bake = new Bake();
    const expectedDef = <BakeDefinition>JSON.parse(fs.readFileSync(out, {encoding: 'utf-8'}).trim())
-    expect(await bake.parseDefinitions(sources, targets, overrides)).toEqual(expectedDef);
+    expect(await bake.getDefinition({
+      files: files,
+      targets: targets,
+      overrides: overrides
+    }, execOptions)).toEqual(expectedDef);
  });
 });

--- a/tests/buildx/inputs.test.ts
+++ b/tests/buildx/inputs.test.ts
@@ -20,16 +20,13 @@ import * as path from 'path';
 import * as rimraf from 'rimraf';

 import {Context} from '../../src/context';
-import {Inputs} from '../../src/buildx/inputs';
+import {Build} from '../../src/buildx/build';

 const fixturesDir = path.join(__dirname, '..', 'fixtures');
 // prettier-ignore
 const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-inputs-jest');
 const tmpName = path.join(tmpDir, '.tmpname-jest');
-const metadata = `{
-  "containerimage.config.digest": "sha256:059b68a595b22564a1cbc167af369349fdc2ecc1f7bc092c2235cbf601a795fd",
-  "containerimage.digest": "sha256:b09b9482c72371486bb2c1d2c2a2633ed1d0b8389e12c8d52b9e052725c0c83c"
-}`;
+const metadata = JSON.parse(fs.readFileSync(path.join(fixturesDir, 'metadata.json'), 'utf-8'));

 jest.spyOn(Context, 'tmpDir').mockImplementation((): string => {
  if (!fs.existsSync(tmpDir)) {
@@ -42,39 +39,62 @@ jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
  return tmpName;
 });

-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
 afterEach(() => {
  rimraf.sync(tmpDir);
 });

-describe('resolveBuildImageID', () => {
+describe('resolveImageID', () => {
  it('matches', async () => {
    const imageID = 'sha256:bfb45ab72e46908183546477a08f8867fc40cebadd00af54b071b097aed127a9';
-    const imageIDFile = Inputs.getBuildImageIDFilePath();
-    await fs.writeFileSync(imageIDFile, imageID);
-    const expected = Inputs.resolveBuildImageID();
-    expect(expected).toEqual(imageID);
+    const build = new Build();
+    fs.writeFileSync(build.getImageIDFilePath(), imageID);
+    expect(build.resolveImageID()).toEqual(imageID);
  });
 });

-describe('resolveBuildMetadata', () => {
+describe('resolveMetadata', () => {
  it('matches', async () => {
-    const metadataFile = Inputs.getBuildMetadataFilePath();
-    await fs.writeFileSync(metadataFile, metadata);
-    const expected = Inputs.resolveBuildMetadata();
-    expect(expected).toEqual(metadata);
+    const build = new Build();
+    fs.writeFileSync(build.getMetadataFilePath(), JSON.stringify(metadata));
+    expect(build.resolveMetadata()).toEqual(metadata);
+  });
+});
+
+describe('resolveRef', () => {
+  it('matches', async () => {
+    const build = new Build();
+    fs.writeFileSync(build.getMetadataFilePath(), JSON.stringify(metadata));
+    expect(build.resolveRef()).toEqual('default/default/n6ibcp9b2pw108rrz7ywdznvo');
+  });
+});
+
+describe('resolveProvenance', () => {
+  it('matches', async () => {
+    const build = new Build();
+    fs.writeFileSync(build.getMetadataFilePath(), JSON.stringify(metadata));
+    const provenance = build.resolveProvenance();
+    expect(provenance).toBeDefined();
+    expect(provenance?.buildType).toEqual('https://mobyproject.org/buildkit@v1');
+    expect(provenance?.materials).toBeDefined();
+    expect(provenance?.materials?.length).toEqual(2);
+  });
+});
+
+describe('resolveWarnings', () => {
+  it('matches', async () => {
+    const build = new Build();
+    fs.writeFileSync(build.getMetadataFilePath(), JSON.stringify(metadata));
+    const warnings = build.resolveWarnings();
+    expect(warnings).toBeDefined();
+    expect(warnings?.length).toEqual(3);
  });
 });

 describe('resolveDigest', () => {
  it('matches', async () => {
-    const metadataFile = Inputs.getBuildMetadataFilePath();
-    await fs.writeFileSync(metadataFile, metadata);
-    const expected = Inputs.resolveDigest();
-    expect(expected).toEqual('sha256:b09b9482c72371486bb2c1d2c2a2633ed1d0b8389e12c8d52b9e052725c0c83c');
+    const build = new Build();
+    fs.writeFileSync(build.getMetadataFilePath(), JSON.stringify(metadata));
+    expect(build.resolveDigest()).toEqual('sha256:b09b9482c72371486bb2c1d2c2a2633ed1d0b8389e12c8d52b9e052725c0c83c');
  });
 });

@@ -92,7 +112,7 @@ describe('getProvenanceInput', () => {
  test.each([
    [
      'true',
-      'builder-id=https://github.com/docker/actions-toolkit/actions/runs/123'
+      'builder-id=https://github.com/docker/actions-toolkit/actions/runs/2188748038/attempts/2'
    ],
    [
      'false',
@@ -100,11 +120,11 @@ describe('getProvenanceInput', () => {
    ],
    [
      'mode=min',
-      'mode=min,builder-id=https://github.com/docker/actions-toolkit/actions/runs/123'
+      'mode=min,builder-id=https://github.com/docker/actions-toolkit/actions/runs/2188748038/attempts/2'
    ],
    [
      'mode=max',
-      'mode=max,builder-id=https://github.com/docker/actions-toolkit/actions/runs/123'
+      'mode=max,builder-id=https://github.com/docker/actions-toolkit/actions/runs/2188748038/attempts/2'
    ],
    [
      'builder-id=foo',
@@ -119,8 +139,8 @@ describe('getProvenanceInput', () => {
      ''
    ],
  ])('given input %p', async (input: string, expected: string) => {
-    await setInput('provenance', input);
-    expect(Inputs.getProvenanceInput('provenance')).toEqual(expected);
+    setInput('provenance', input);
+    expect(Build.getProvenanceInput('provenance')).toEqual(expected);
  });
 });

@@ -129,11 +149,11 @@ describe('resolveProvenanceAttrs', () => {
  test.each([
    [
      'mode=min',
-      'mode=min,builder-id=https://github.com/docker/actions-toolkit/actions/runs/123'
+      'mode=min,builder-id=https://github.com/docker/actions-toolkit/actions/runs/2188748038/attempts/2'
    ],
    [
      'mode=max',
-      'mode=max,builder-id=https://github.com/docker/actions-toolkit/actions/runs/123'
+      'mode=max,builder-id=https://github.com/docker/actions-toolkit/actions/runs/2188748038/attempts/2'
    ],
    [
      'builder-id=foo',
@@ -145,14 +165,14 @@ describe('resolveProvenanceAttrs', () => {
    ],
    [
      '',
-      'builder-id=https://github.com/docker/actions-toolkit/actions/runs/123'
+      'builder-id=https://github.com/docker/actions-toolkit/actions/runs/2188748038/attempts/2'
    ],
  ])('given %p', async (input: string, expected: string) => {
-    expect(Inputs.resolveProvenanceAttrs(input)).toEqual(expected);
+    expect(Build.resolveProvenanceAttrs(input)).toEqual(expected);
  });
 });

-describe('resolveBuildSecret', () => {
+describe('resolveSecret', () => {
  test.each([
    ['A_SECRET=abcdef0123456789', false, 'A_SECRET', 'abcdef0123456789', null],
    ['GIT_AUTH_TOKEN=abcdefghijklmno=0123456789', false, 'GIT_AUTH_TOKEN', 'abcdefghijklmno=0123456789', null],
@@ -166,9 +186,9 @@ describe('resolveBuildSecret', () => {
    try {
      let secret: string;
      if (file) {
-        secret = Inputs.resolveBuildSecretFile(kvp);
+        secret = Build.resolveSecretFile(kvp);
      } else {
-        secret = Inputs.resolveBuildSecretString(kvp);
+        secret = Build.resolveSecretString(kvp);
      }
      expect(secret).toEqual(`id=${exKey},src=${tmpName}`);
      expect(fs.readFileSync(tmpName, 'utf-8')).toEqual(exValue);
@@ -185,7 +205,7 @@ describe('resolveBuildSecret', () => {
    ['FOO=bar=baz', 'FOO', 'bar=baz', null]
  ])('given %p key and %p env', async (kvp: string, exKey: string, exValue: string, error: Error | null) => {
    try {
-      const secret = Inputs.resolveBuildSecretEnv(kvp);
+      const secret = Build.resolveSecretEnv(kvp);
      expect(secret).toEqual(`id=${exKey},env=${exValue}`);
    } catch (e) {
      // eslint-disable-next-line jest/no-conditional-expect
@@ -194,6 +214,54 @@ describe('resolveBuildSecret', () => {
  });
 });

+describe('resolveCacheToAttrs', () => {
+  // prettier-ignore
+  test.each([
+    [
+      '',
+      undefined,
+      ''
+    ],
+    [
+      'user/app:cache',
+      undefined,
+      'user/app:cache'
+    ],
+    [
+      'type=inline',
+      undefined,
+      'type=inline'
+    ],
+    [
+      'type=gha',
+      undefined,
+      'type=gha,repository=docker/actions-toolkit',
+    ],
+    [
+      'type=gha,mode=max',
+      undefined,
+      'type=gha,mode=max,repository=docker/actions-toolkit',
+    ],
+    [
+      'type=gha,mode=max',
+      'abcd1234',
+      'type=gha,mode=max,repository=docker/actions-toolkit,ghtoken=abcd1234',
+    ],
+    [
+      'type=gha,repository=foo/bar,mode=max',
+      undefined,
+      'type=gha,repository=foo/bar,mode=max',
+    ],
+    [
+      'type=gha,repository=foo/bar,mode=max',
+      'abcd1234',
+      'type=gha,repository=foo/bar,mode=max,ghtoken=abcd1234',
+    ],
+  ])('given %p', async (input: string, githubToken: string | undefined, expected: string) => {
+    expect(Build.resolveCacheToAttrs(input, githubToken)).toEqual(expected);
+  });
+});
+
 describe('hasLocalExporter', () => {
  // prettier-ignore
  test.each([
@@ -206,7 +274,7 @@ describe('hasLocalExporter', () => {
    [['" type= local" , dest=./release-out'], true],
    [['.'], true]
  ])('given %p returns %p', async (exporters: Array<string>, expected: boolean) => {
-    expect(Inputs.hasLocalExporter(exporters)).toEqual(expected);
+    expect(Build.hasLocalExporter(exporters)).toEqual(expected);
  });
 });

@@ -222,7 +290,7 @@ describe('hasTarExporter', () => {
    [['" type= local" , dest=./release-out'], false],
    [['.'], false]
  ])('given %p returns %p', async (exporters: Array<string>, expected: boolean) => {
-    expect(Inputs.hasTarExporter(exporters)).toEqual(expected);
+    expect(Build.hasTarExporter(exporters)).toEqual(expected);
  });
 });

@@ -240,7 +308,42 @@ describe('hasDockerExporter', () => {
    [['type=docker'], true, true],
    [['.'], true, true],
  ])('given %p returns %p', async (exporters: Array<string>, expected: boolean, load: boolean | undefined) => {
-    expect(Inputs.hasDockerExporter(exporters, load)).toEqual(expected);
+    expect(Build.hasDockerExporter(exporters, load)).toEqual(expected);
+  });
+});
+
+describe('hasAttestationType', () => {
+  // prettier-ignore
+  test.each([
+    ['type=provenance,mode=min', 'provenance', true],
+    ['type=sbom,true', 'sbom', true],
+    ['type=foo,bar', 'provenance', false],
+  ])('given %p for %p returns %p', async (attrs: string, name: string, expected: boolean) => {
+    expect(Build.hasAttestationType(name, attrs)).toEqual(expected);
+  });
+});
+
+describe('resolveAttestationAttrs', () => {
+  // prettier-ignore
+  test.each([
+    [
+      'type=provenance,mode=min',
+      'type=provenance,mode=min'
+    ],
+    [
+      'type=provenance,true',
+      'type=provenance,disabled=false'
+    ],
+    [
+      'type=provenance,false',
+      'type=provenance,disabled=true'
+    ],
+    [
+      '',
+      ''
+    ],
+  ])('given %p', async (input: string, expected: string) => {
+    expect(Build.resolveAttestationAttrs(input)).toEqual(expected);
  });
 });

@@ -250,7 +353,7 @@ describe('hasGitAuthTokenSecret', () => {
    [['A_SECRET=abcdef0123456789'], false],
    [['GIT_AUTH_TOKEN=abcdefghijklmno=0123456789'], true],
  ])('given %p secret', async (kvp: Array<string>, expected: boolean) => {
-    expect(Inputs.hasGitAuthTokenSecret(kvp)).toBe(expected);
+    expect(Build.hasGitAuthTokenSecret(kvp)).toBe(expected);
  });
 });

--- a/tests/buildx/builder.test.ts
+++ b/tests/buildx/builder.test.ts
@@ -14,21 +14,17 @@
 * limitations under the License.
 */

-import {beforeEach, describe, expect, it, jest, test} from '@jest/globals';
+import {describe, expect, it, jest, test} from '@jest/globals';
 import * as fs from 'fs';
 import * as path from 'path';

 import {Builder} from '../../src/buildx/builder';
 import {Exec} from '../../src/exec';

-import {BuilderInfo} from '../../src/types/builder';
+import {BuilderInfo} from '../../src/types/buildx/builder';

 const fixturesDir = path.join(__dirname, '..', 'fixtures');

-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
 jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<BuilderInfo> => {
  return {
    name: 'builder2',
@@ -393,7 +389,71 @@ describe('parseInspect', () => {
          }
        ],
      }
-    ]
+    ],
+    [
+     'inspect11.txt',
+     {
+       "name": "builder",
+       "driver": "docker-container",
+       "lastActivity": new Date("2024-03-01T14:25:03.000Z"),
+       "nodes": [
+         {
+           "buildkit": "37657a1",
+           "buildkitd-flags": "--debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host --allow-insecure-entitlement=network.host",
+           "driver-opts": [
+             "env.JAEGER_TRACE=localhost:6831",
+             "image=moby/buildkit:master",
+             "network=host",
+             "env.BUILDKIT_STEP_LOG_MAX_SIZE=10485760",
+             "env.BUILDKIT_STEP_LOG_MAX_SPEED=10485760",
+           ],
+           "endpoint": "unix:///var/run/docker.sock",
+           "name": "builder0",
+           "platforms": "linux/amd64,linux/amd64/v2,linux/amd64/v3,linux/arm64,linux/riscv64,linux/ppc64le,linux/s390x,linux/386,linux/mips64le,linux/mips64,linux/arm/v7,linux/arm/v6",
+           "status": "running",
+           "features": {
+             "Cache export": true,
+             "Docker exporter": true,
+             "Multi-platform build": true,
+             "OCI exporter": true,
+           },
+           "labels": {
+             "org.mobyproject.buildkit.worker.executor": "oci",
+             "org.mobyproject.buildkit.worker.hostname": "docker-desktop",
+             "org.mobyproject.buildkit.worker.network": "host",
+             "org.mobyproject.buildkit.worker.oci.process-mode": "sandbox",
+             "org.mobyproject.buildkit.worker.selinux.enabled": "false",
+             "org.mobyproject.buildkit.worker.snapshotter": "overlayfs",
+           },
+           "gcPolicy": [
+             {
+               "all": false,
+               "filter": [
+                 "type==source.local",
+                 "type==exec.cachemount",
+                 "type==source.git.checkout"
+               ],
+               "keepDuration": "48h0m0s",
+               "keepBytes": "488.3MiB",
+             },
+             {
+               "all": false,
+               "keepDuration": "1440h0m0s",
+               "keepBytes": "94.06GiB",
+             },
+             {
+               "all": false,
+               "keepBytes": "94.06GiB",
+             },
+             {
+               "all": true,
+               "keepBytes": "94.06GiB",
+             }
+           ]
+         }
+       ]
+     }
+    ],
  ])('given %p', async (inspectFile, expected) => {
    expect(await Builder.parseInspect(fs.readFileSync(path.join(fixturesDir, inspectFile)).toString())).toEqual(expected);
  });
--- a/tests/buildx/buildx.test.itg.ts
+++ b/tests/buildx/buildx.test.itg.ts
@@ -0,0 +1,74 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, it} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as core from '@actions/core';
+
+import {Buildx} from '../../src/buildx/buildx';
+import {Build} from '../../src/buildx/build';
+import {Exec} from '../../src/exec';
+
+const fixturesDir = path.join(__dirname, '..', 'fixtures');
+
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-jest');
+
+const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;
+
+maybe('convertWarningsToGitHubAnnotations', () => {
+  it('annotate lint issues', async () => {
+    const buildx = new Buildx();
+    const build = new Build({buildx: buildx});
+
+    fs.mkdirSync(tmpDir, {recursive: true});
+    await expect(
+      (async () => {
+        // prettier-ignore
+        const buildCmd = await buildx.getCommand([
+          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+          'build',
+          '-f', path.join(fixturesDir, 'lint.Dockerfile'),
+          fixturesDir,
+          '--metadata-file', build.getMetadataFilePath()
+        ]);
+        await Exec.exec(buildCmd.command, buildCmd.args, {
+          env: Object.assign({}, process.env, {
+            BUILDX_METADATA_WARNINGS: 'true'
+          }) as {
+            [key: string]: string;
+          }
+        });
+      })()
+    ).resolves.not.toThrow();
+
+    const metadata = build.resolveMetadata();
+    expect(metadata).toBeDefined();
+    const buildRef = build.resolveRef(metadata);
+    expect(buildRef).toBeDefined();
+    const buildWarnings = build.resolveWarnings(metadata);
+    expect(buildWarnings).toBeDefined();
+
+    const annotations = await Buildx.convertWarningsToGitHubAnnotations(buildWarnings ?? [], [buildRef ?? '']);
+    expect(annotations).toBeDefined();
+    expect(annotations?.length).toBeGreaterThan(0);
+
+    for (const annotation of annotations ?? []) {
+      core.warning(annotation.message, annotation);
+    }
+  });
+});
--- a/tests/buildx/buildx.test.ts
+++ b/tests/buildx/buildx.test.ts
@@ -24,8 +24,9 @@ import {Buildx} from '../../src/buildx/buildx';
 import {Context} from '../../src/context';
 import {Exec} from '../../src/exec';

-import {Cert} from '../../src/types/buildx';
+import {Cert, LocalState} from '../../src/types/buildx/buildx';

+const fixturesDir = path.join(__dirname, '..', 'fixtures');
 // prettier-ignore
 const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-jest');
 const tmpName = path.join(tmpDir, '.tmpname-jest');
@@ -41,10 +42,6 @@ jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
  return tmpName;
 });

-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
 afterEach(() => {
  rimraf.sync(tmpDir);
 });
@@ -116,21 +113,6 @@ describe('isAvailable', () => {
  });
 });

-describe('printInspect', () => {
-  it('prints builder2 instance', async () => {
-    const execSpy = jest.spyOn(Exec, 'exec');
-    const buildx = new Buildx({
-      standalone: true
-    });
-    await buildx.printInspect('builder2').catch(() => {
-      // noop
-    });
-    expect(execSpy).toHaveBeenCalledWith(`buildx`, ['inspect', 'builder2'], {
-      failOnStdErr: false
-    });
-  });
-});
-
 describe('printVersion', () => {
  it('docker cli', async () => {
    const execSpy = jest.spyOn(Exec, 'exec');
@@ -267,3 +249,96 @@ describe('resolveCertsDriverOpts', () => {
    }
  });
 });
+
+describe('localState', () => {
+  // prettier-ignore
+  test.each([
+    [
+      'default/default/ij71n3ubmhck85d03zdvye5nr',
+      {
+        LocalPath: '/home/crazymax/github/docker_org/buildx',
+        DockerfilePath: '/home/crazymax/github/docker_org/buildx/Dockerfile'
+      } as LocalState,
+    ],
+    [
+      'default/default/7pnnqpgacnqq98oa1a1h5sz6t',
+      {
+        LocalPath: 'https://github.com/docker/actions-toolkit.git#:__tests__/fixtures',
+        DockerfilePath: 'hello.Dockerfile'
+      } as LocalState,
+    ],
+    [
+      'default/default/84p2qpgacnqq98oa1a1h5sz6t',
+      {
+        LocalPath: 'https://github.com/docker/actions-toolkit.git#:__tests__/fixtures',
+        DockerfilePath: '-'
+      } as LocalState,
+    ],
+    [
+      'default/default/a5s9rlg9cnqq98oa1a1h5sz6t',
+      {
+        LocalPath: '-',
+        DockerfilePath: ''
+      } as LocalState,
+    ],
+    [
+      'default/default/aav2ix4nw5eky66fw045dkylr',
+      {
+        LocalPath: 'https://github.com/docker/buildx.git',
+        DockerfilePath: ''
+      } as LocalState,
+    ],
+    [
+      'default/default/dfsz8r57a98zf789pmlyzqp3n',
+      {
+        LocalPath: 'https://github.com/docker/actions-toolkit.git#:__tests__/fixtures',
+        DockerfilePath: 'hello.Dockerfile'
+      } as LocalState,
+    ],
+    [
+      'default/default/w38vcd5fo5cfvfyig77qjec0v',
+      {
+        LocalPath: '/home/crazy/hello',
+        DockerfilePath: '-'
+      } as LocalState,
+    ]
+  ])('given %p', async (ref: string, expected: LocalState) => {
+    const localState = Buildx.localState(ref, path.join(fixturesDir, 'buildx-refs'));
+    expect(localState).toEqual(expected);
+  });
+});
+
+describe('refs', () => {
+  it('returns all refs', async () => {
+    const refs = Buildx.refs({
+      dir: path.join(fixturesDir, 'buildx-refs')
+    });
+    expect(Object.keys(refs).length).toEqual(17);
+  });
+  it('returns default builder refs', async () => {
+    const refs = Buildx.refs({
+      dir: path.join(fixturesDir, 'buildx-refs'),
+      builderName: 'default'
+    });
+    expect(Object.keys(refs).length).toEqual(14);
+  });
+  it('returns foo builder refs', async () => {
+    const refs = Buildx.refs({
+      dir: path.join(fixturesDir, 'buildx-refs'),
+      builderName: 'foo'
+    });
+    expect(Object.keys(refs).length).toEqual(3);
+  });
+  it('returns default builder refs since', async () => {
+    const mdate = new Date('2023-09-05T00:00:00Z');
+    fs.utimesSync(path.join(fixturesDir, 'buildx-refs', 'default', 'default', '36dix0eiv9evr61vrwzn32w7q'), mdate, mdate);
+    fs.utimesSync(path.join(fixturesDir, 'buildx-refs', 'default', 'default', '49p5r8und2konke5pmlyzqp3n'), mdate, mdate);
+    fs.utimesSync(path.join(fixturesDir, 'buildx-refs', 'default', 'default', 'a8zqzhhv5yiazm396jobsgdw2'), mdate, mdate);
+    const refs = Buildx.refs({
+      dir: path.join(fixturesDir, 'buildx-refs'),
+      builderName: 'default',
+      since: new Date('2024-01-10T00:00:00Z')
+    });
+    expect(Object.keys(refs).length).toEqual(11);
+  });
+});
--- a/tests/buildx/history.test.itg.ts
+++ b/tests/buildx/history.test.itg.ts
@@ -0,0 +1,198 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {afterEach, beforeEach, describe, expect, it, jest, test} from '@jest/globals';
+import * as fs from 'fs';
+import * as path from 'path';
+
+import {Buildx} from '../../src/buildx/buildx';
+import {Bake} from '../../src/buildx/bake';
+import {Build} from '../../src/buildx/build';
+import {History} from '../../src/buildx/history';
+import {Exec} from '../../src/exec';
+
+const fixturesDir = path.join(__dirname, '..', 'fixtures');
+
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-history-jest');
+
+const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;
+
+maybe('exportBuild', () => {
+  // prettier-ignore
+  test.each([
+    [
+      'single',
+      [
+        'build',
+        '-f', path.join(fixturesDir, 'hello.Dockerfile'),
+        fixturesDir
+      ],
+    ],
+    [
+      'multi-platform',
+      [
+        'build',
+        '-f', path.join(fixturesDir, 'hello.Dockerfile'),
+        '--platform', 'linux/amd64,linux/arm64',
+        fixturesDir
+      ],
+    ]
+  ])('export build %p', async (_, bargs) => {
+    const buildx = new Buildx();
+    const build = new Build({buildx: buildx});
+
+    fs.mkdirSync(tmpDir, {recursive: true});
+    await expect(
+      (async () => {
+        // prettier-ignore
+        const buildCmd = await buildx.getCommand([
+          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+          ...bargs,
+          '--metadata-file', build.getMetadataFilePath()
+        ]);
+        await Exec.exec(buildCmd.command, buildCmd.args);
+      })()
+    ).resolves.not.toThrow();
+
+    const metadata = build.resolveMetadata();
+    expect(metadata).toBeDefined();
+    const buildRef = build.resolveRef(metadata);
+    expect(buildRef).toBeDefined();
+
+    const history = new History({buildx: buildx});
+    const exportRes = await history.export({
+      refs: [buildRef ?? '']
+    });
+
+    expect(exportRes).toBeDefined();
+    expect(exportRes?.dockerbuildFilename).toBeDefined();
+    expect(exportRes?.dockerbuildSize).toBeDefined();
+    expect(fs.existsSync(exportRes?.dockerbuildFilename)).toBe(true);
+    expect(exportRes?.summaries).toBeDefined();
+  });
+
+  // prettier-ignore
+  test.each([
+    [
+      'single',
+      [
+        'bake',
+        '-f', path.join(fixturesDir, 'hello-bake.hcl'),
+        'hello'
+      ],
+    ],
+    [
+      'group',
+      [
+        'bake',
+        '-f', path.join(fixturesDir, 'hello-bake.hcl'),
+        'hello-all'
+      ],
+    ],
+    [
+      'matrix',
+      [
+        'bake',
+        '-f', path.join(fixturesDir, 'hello-bake.hcl'),
+        'hello-matrix'
+      ],
+    ]
+  ])('export bake build %p', async (_, bargs) => {
+    const buildx = new Buildx();
+    const bake = new Bake({buildx: buildx});
+
+    fs.mkdirSync(tmpDir, {recursive: true});
+    await expect(
+      (async () => {
+        // prettier-ignore
+        const buildCmd = await buildx.getCommand([
+          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+          ...bargs,
+          '--metadata-file', bake.getMetadataFilePath()
+        ]);
+        await Exec.exec(buildCmd.command, buildCmd.args, {
+          cwd: fixturesDir
+        });
+      })()
+    ).resolves.not.toThrow();
+
+    const metadata = bake.resolveMetadata();
+    expect(metadata).toBeDefined();
+    const buildRefs = bake.resolveRefs(metadata);
+    expect(buildRefs).toBeDefined();
+
+    const history = new History({buildx: buildx});
+    const exportRes = await history.export({
+      refs: buildRefs ?? []
+    });
+
+    expect(exportRes).toBeDefined();
+    expect(exportRes?.dockerbuildFilename).toBeDefined();
+    expect(exportRes?.dockerbuildSize).toBeDefined();
+    expect(fs.existsSync(exportRes?.dockerbuildFilename)).toBe(true);
+    expect(exportRes?.summaries).toBeDefined();
+  });
+});
+
+maybe('exportBuild custom image', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv,
+      DOCKER_BUILD_EXPORT_BUILD_IMAGE: 'docker.io/dockereng/export-build:0.2.2'
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+
+  it('with custom image', async () => {
+    const buildx = new Buildx();
+    const build = new Build({buildx: buildx});
+
+    fs.mkdirSync(tmpDir, {recursive: true});
+    await expect(
+      (async () => {
+        // prettier-ignore
+        const buildCmd = await buildx.getCommand([
+          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+          'build', '-f', path.join(fixturesDir, 'hello.Dockerfile'),
+          '--metadata-file', build.getMetadataFilePath(),
+          fixturesDir
+        ]);
+        await Exec.exec(buildCmd.command, buildCmd.args);
+      })()
+    ).resolves.not.toThrow();
+
+    const metadata = build.resolveMetadata();
+    expect(metadata).toBeDefined();
+    const buildRef = build.resolveRef(metadata);
+    expect(buildRef).toBeDefined();
+
+    const history = new History({buildx: buildx});
+    const exportRes = await history.export({
+      refs: [buildRef ?? '']
+    });
+
+    expect(exportRes).toBeDefined();
+    expect(exportRes?.dockerbuildFilename).toBeDefined();
+    expect(exportRes?.dockerbuildSize).toBeDefined();
+    expect(fs.existsSync(exportRes?.dockerbuildFilename)).toBe(true);
+    expect(exportRes?.summaries).toBeDefined();
+  });
+});
--- a/tests/buildx/install.test.itg.ts
+++ b/tests/buildx/install.test.itg.ts
@@ -0,0 +1,42 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, test} from '@jest/globals';
+import * as fs from 'fs';
+
+import {Install} from '../../src/buildx/install';
+
+const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;
+
+maybe('download', () => {
+  // prettier-ignore
+  test.each(['latest'])(
+    'install docker %s', async (version) => {
+      await expect((async () => {
+        const install = new Install({
+          standalone: true
+        });
+        const toolPath = await install.download(version);
+        if (!fs.existsSync(toolPath)) {
+          throw new Error('toolPath does not exist');
+        }
+        const binPath = await install.installStandalone(toolPath);
+        if (!fs.existsSync(binPath)) {
+          throw new Error('binPath does not exist');
+        }
+      })()).resolves.not.toThrow();
+    }, 60000);
+});
--- a/tests/buildx/install.test.ts
+++ b/tests/buildx/install.test.ts
@@ -14,7 +14,7 @@
 * limitations under the License.
 */

-import {describe, expect, it, jest, test, beforeEach, afterEach} from '@jest/globals';
+import {describe, expect, it, jest, test, afterEach} from '@jest/globals';
 import * as fs from 'fs';
 import * as path from 'path';
 import * as rimraf from 'rimraf';
@@ -25,10 +25,6 @@ import {Install} from '../../src/buildx/install';
 // prettier-ignore
 const tmpDir = path.join(process.env.TEMP || '/tmp', 'buildx-jest');

-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
 afterEach(function () {
  rimraf.sync(tmpDir);
 });
@@ -67,6 +63,17 @@ describe('download', () => {
    expect(fs.existsSync(toolPath)).toBe(true);
  });

+  // prettier-ignore
+  test.each([
+    ['v0.11.2'],
+    ['v0.12.0'],
+  ])(
+  'acquires %p of buildx without cache', async (version) => {
+    const install = new Install({standalone: false});
+    const toolPath = await install.download(version, true);
+    expect(fs.existsSync(toolPath)).toBe(true);
+  });
+
  // TODO: add tests for arm
  // prettier-ignore
  test.each([
--- a/tests/cache.test.itg.ts
+++ b/tests/cache.test.itg.ts
@@ -0,0 +1,40 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import path from 'path';
+import {describe, expect, it} from '@jest/globals';
+
+import {Cache} from '../src/cache';
+
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'cache-jest');
+
+const fixturesDir = path.join(__dirname, 'fixtures');
+
+describe('cache', () => {
+  it('github-repo', async () => {
+    const r = (Math.random() + 1).toString(36).substring(7);
+    const htcName = `cache-test-github-repo-${r}`;
+    const c = new Cache({
+      htcName: htcName,
+      htcVersion: `v1.0.0+${r}`,
+      baseCacheDir: path.join(tmpDir, '.cache-test'),
+      cacheFile: 'github-repo.json'
+    });
+    expect(await c.save(path.join(fixturesDir, 'github-repo.json'))).not.toEqual('');
+    expect(await c.find()).not.toEqual('');
+  });
+});
--- a/tests/context.test.ts
+++ b/tests/context.test.ts
@@ -17,7 +17,7 @@
 import * as fs from 'fs';
 import * as path from 'path';
 import * as rimraf from 'rimraf';
-import {describe, expect, jest, it, beforeEach, afterEach} from '@jest/globals';
+import {describe, expect, jest, it, afterEach} from '@jest/globals';

 import {Context} from '../src/context';

@@ -36,10 +36,6 @@ jest.spyOn(Context, 'tmpName').mockImplementation((): string => {
  return tmpName;
 });

-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
 afterEach(() => {
  rimraf.sync(tmpDir);
 });
@@ -55,9 +51,3 @@ describe('gitContext', () => {
    expect(Context.gitContext()).toEqual('https://github.com/docker/actions-toolkit.git#refs/heads/master');
  });
 });
-
-describe('provenanceBuilderID', () => {
-  it('returns 123', async () => {
-    expect(Context.provenanceBuilderID()).toEqual('https://github.com/docker/actions-toolkit/actions/runs/123');
-  });
-});
--- a/tests/docker/docker.test.itg.ts
+++ b/tests/docker/docker.test.itg.ts
@@ -0,0 +1,73 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, it, test} from '@jest/globals';
+
+import {Docker} from '../../src/docker/docker';
+
+const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;
+
+maybe('isDaemonRunning', () => {
+  it('checks if daemon is running', async () => {
+    expect(await Docker.isDaemonRunning()).toBe(true);
+  });
+});
+
+maybe('pull', () => {
+  // prettier-ignore
+  test.each([
+    [
+      'busybox',
+      undefined,
+    ],
+    [
+      'busybox:1.36',
+      undefined,
+    ],
+    [
+      'busybox@sha256:7ae8447f3a7f5bccaa765926f25fc038e425cf1b2be6748727bbea9a13102094',
+      undefined,
+    ],
+    [
+      'doesnotexist:foo',
+      `pull access denied for doesnotexist`,
+    ],
+  ])('pulling %p', async (image: string, err: string | undefined) => {
+      try {
+        await Docker.pull(image, true);
+        if (err !== undefined) {
+          throw new Error('Expected an error to be thrown');
+        }
+      } catch (e) {
+        if (err === undefined) {
+          throw new Error(`Expected no error, but got: ${e.message}`);
+        }
+        // eslint-disable-next-line jest/no-conditional-expect
+        expect(e.message).toContain(err);
+      }
+    }, 600000);
+});
+
+maybe('contextInspect', () => {
+  it('inspect default context', async () => {
+    const contextInfo = await Docker.contextInspect();
+    expect(contextInfo).toBeDefined();
+    console.log('contextInfo', contextInfo);
+    expect(contextInfo?.Name).toBeDefined();
+    expect(contextInfo?.Endpoints).toBeDefined();
+    expect(Object.keys(contextInfo?.Endpoints).length).toBeGreaterThan(0);
+  });
+});
--- a/tests/docker/docker.test.ts
+++ b/tests/docker/docker.test.ts
@@ -22,19 +22,14 @@ import osm = require('os');
 import * as rimraf from 'rimraf';

 import {Docker} from '../../src/docker/docker';
-import {Exec} from '../../src/exec';

-import {ConfigFile} from '../../src/types/docker';
+import {ConfigFile} from '../../src/types/docker/docker';

 const fixturesDir = path.join(__dirname, '..', 'fixtures');

 // prettier-ignore
 const tmpDir = path.join(process.env.TEMP || '/tmp', 'docker-jest');

-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
 afterEach(function () {
  rimraf.sync(tmpDir);
 });
@@ -109,35 +104,132 @@ describe('isAvailable', () => {
  });
 });

-describe('context', () => {
-  it('call docker context show', async () => {
-    const execSpy = jest.spyOn(Exec, 'getExecOutput');
-    await Docker.context().catch(() => {
-      // noop
-    });
-    expect(execSpy).toHaveBeenCalledWith(`docker`, ['context', 'inspect', '--format', '{{.Name}}'], {
+describe('exec', () => {
+  it('returns docker version', async () => {
+    const execSpy = jest.spyOn(Docker, 'exec');
+    await Docker.exec(['version'], {
      ignoreReturnCode: true,
      silent: true
    });
+    expect(execSpy).toHaveBeenCalledTimes(1);
+    const callfunc = execSpy.mock.calls[0];
+    expect(Object.keys(callfunc[1]?.env || {}).length).toBeGreaterThan(0);
+    const env = callfunc[1]?.env;
+    expect(env).toHaveProperty('DOCKER_CONTENT_TRUST');
+    expect(env?.DOCKER_CONTENT_TRUST).toBe('false');
+    if (callfunc[1]?.env) {
+      // already checked env
+      callfunc[1].env = undefined;
+    }
+    expect(callfunc).toEqual([
+      ['version'],
+      {
+        ignoreReturnCode: true,
+        silent: true
+      }
+    ]);
+  });
+});
+
+describe('getExecOutput', () => {
+  it('returns docker version', async () => {
+    const execSpy = jest.spyOn(Docker, 'getExecOutput');
+    await Docker.getExecOutput(['version'], {
+      ignoreReturnCode: true,
+      silent: true
+    });
+    expect(execSpy).toHaveBeenCalledTimes(1);
+    const callfunc = execSpy.mock.calls[0];
+    expect(Object.keys(callfunc[1]?.env || {}).length).toBeGreaterThan(0);
+    const env = callfunc[1]?.env;
+    expect(env).toHaveProperty('DOCKER_CONTENT_TRUST');
+    expect(env?.DOCKER_CONTENT_TRUST).toBe('false');
+    if (callfunc[1]?.env) {
+      // already checked env
+      callfunc[1].env = undefined;
+    }
+    expect(callfunc).toEqual([
+      ['version'],
+      {
+        ignoreReturnCode: true,
+        silent: true
+      }
+    ]);
+  });
+});
+
+describe('context', () => {
+  it('call docker context show', async () => {
+    const execSpy = jest.spyOn(Docker, 'getExecOutput');
+    await Docker.context().catch(() => {
+      // noop
+    });
+    expect(execSpy).toHaveBeenCalledTimes(1);
+    const callfunc = execSpy.mock.calls[0];
+    if (callfunc && callfunc[1]) {
+      // we don't want to check env opt
+      callfunc[1].env = undefined;
+    }
+    expect(callfunc).toEqual([
+      ['context', 'inspect', '--format', '{{.Name}}'],
+      {
+        ignoreReturnCode: true,
+        silent: true
+      }
+    ]);
+  });
+});
+
+describe('contextInspect', () => {
+  it('call docker context inspect', async () => {
+    const execSpy = jest.spyOn(Docker, 'getExecOutput');
+    await Docker.contextInspect('foo').catch(() => {
+      // noop
+    });
+    expect(execSpy).toHaveBeenCalledTimes(1);
+    const callfunc = execSpy.mock.calls[0];
+    if (callfunc && callfunc[1]) {
+      // we don't want to check env opt
+      callfunc[1].env = undefined;
+    }
+    expect(callfunc).toEqual([
+      ['context', 'inspect', '--format=json', 'foo'],
+      {
+        ignoreReturnCode: true,
+        silent: true
+      }
+    ]);
  });
 });

 describe('printVersion', () => {
  it('call docker version', async () => {
-    const execSpy = jest.spyOn(Exec, 'exec');
+    const execSpy = jest.spyOn(Docker, 'exec');
    await Docker.printVersion().catch(() => {
      // noop
    });
-    expect(execSpy).toHaveBeenCalledWith(`docker`, ['version']);
+    expect(execSpy).toHaveBeenCalledTimes(1);
+    const callfunc = execSpy.mock.calls[0];
+    if (callfunc && callfunc[1]) {
+      // we don't want to check env opt
+      callfunc[1].env = undefined;
+    }
+    expect(callfunc).toEqual([['version']]);
  });
 });

 describe('printInfo', () => {
  it('call docker info', async () => {
-    const execSpy = jest.spyOn(Exec, 'exec');
+    const execSpy = jest.spyOn(Docker, 'exec');
    await Docker.printInfo().catch(() => {
      // noop
    });
-    expect(execSpy).toHaveBeenCalledWith(`docker`, ['info']);
+    expect(execSpy).toHaveBeenCalledTimes(1);
+    const callfunc = execSpy.mock.calls[0];
+    if (callfunc && callfunc[1]) {
+      // we don't want to check env opt
+      callfunc[1].env = undefined;
+    }
+    expect(callfunc).toEqual([['info']]);
  });
 });
--- a/tests/docker/install.test.itg.ts
+++ b/tests/docker/install.test.itg.ts
@@ -19,6 +19,7 @@ import {jest, describe, expect, test, beforeEach, afterEach} from '@jest/globals

 import {Install} from '../../src/docker/install';
 import {Docker} from '../../src/docker/docker';
+import {Exec} from '../../src/exec';

 // prettier-ignore
 const tmpDir = path.join(process.env.TEMP || '/tmp', 'docker-install-jest');
@@ -29,15 +30,28 @@ describe('install', () => {
    jest.resetModules();
    process.env = {
      ...originalEnv,
-      LIMA_START_ARGS: '--cpus 4 --memory 8'
+      LIMA_START_ARGS: '--cpus 4 --memory 8',
+      LIMA_IMAGES: `x86_64:https://cloud.debian.org/images/cloud/bookworm/20231013-1532/debian-12-genericcloud-amd64-20231013-1532.qcow2@sha512:6b55e88b027c14da1b55c85a25a9f7069d4560a8fdb2d948c986a585db469728a06d2c528303e34bb62d8b2984def38fd9ddfc00965846ff6e05b01d6e883bfe
+aarch64:https://cloud.debian.org/images/cloud/bookworm/20231013-1532/debian-12-genericcloud-arm64-20231013-1532.qcow2`
    };
  });
  afterEach(() => {
    process.env = originalEnv;
  });
  // prettier-ignore
-  test.each(['v24.0.4'])(
+  test.each(['v26.1.4'])(
    'install docker %s', async (version) => {
+      if (process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) {
+        // Remove containerd first on ubuntu runners to make sure it takes
+        // ones packaged with docker
+        await Exec.exec('sudo', ['apt-get', 'remove', '-y', 'containerd.io'], {
+          env: Object.assign({}, process.env, {
+            DEBIAN_FRONTEND: 'noninteractive'
+          }) as {
+            [key: string]: string;
+          }
+        });
+      }
      await expect((async () => {
        const install = new Install({
          version: version,
--- a/tests/docker/install.test.ts
+++ b/tests/docker/install.test.ts
@@ -25,10 +25,6 @@ import {Install} from '../../src/docker/install';
 // prettier-ignore
 const tmpDir = path.join(process.env.TEMP || '/tmp', 'docker-install-jest');

-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
 afterEach(function () {
  rimraf.sync(tmpDir);
 });
@@ -71,3 +67,32 @@ describe('getRelease', () => {
    await expect(Install.getRelease('foo')).rejects.toThrow(new Error('Cannot find Docker release foo in https://raw.githubusercontent.com/docker/actions-toolkit/main/.github/docker-releases.json'));
  });
 });
+
+describe('limaImage', () => {
+  const originalEnv = process.env;
+  beforeEach(() => {
+    jest.resetModules();
+    process.env = {
+      ...originalEnv,
+      LIMA_IMAGES: `x86_64:https://cloud-images.ubuntu.com/releases/23.10/release-20231011/ubuntu-23.10-server-cloudimg-amd64.img@sha256:f6529be56da3429a56e4f5ef202bf4958201bc63f8541e478caa6e8eb712e635
+aarch64:https://cloud-images.ubuntu.com/releases/23.10/release-20231011/ubuntu-23.10-server-cloudimg-arm64.img`
+    };
+  });
+  afterEach(() => {
+    process.env = originalEnv;
+  });
+  it('returns custom images', async () => {
+    expect(Install.limaCustomImages()).toEqual([
+      {
+        location: 'https://cloud-images.ubuntu.com/releases/23.10/release-20231011/ubuntu-23.10-server-cloudimg-amd64.img',
+        arch: 'x86_64',
+        digest: 'sha256:f6529be56da3429a56e4f5ef202bf4958201bc63f8541e478caa6e8eb712e635'
+      },
+      {
+        location: 'https://cloud-images.ubuntu.com/releases/23.10/release-20231011/ubuntu-23.10-server-cloudimg-arm64.img',
+        arch: 'aarch64',
+        digest: ''
+      }
+    ]);
+  });
+});
--- a/tests/dockerhub.test.ts
+++ b/tests/dockerhub.test.ts
@@ -14,17 +14,13 @@
 * limitations under the License.
 */

-import {describe, expect, jest, it, beforeEach} from '@jest/globals';
+import {describe, expect, jest, it} from '@jest/globals';
 import * as fs from 'fs';
 import * as path from 'path';

 import {DockerHub} from '../src/dockerhub';
 import {RepositoryResponse, RepositoryTagsResponse} from '../src/types/dockerhub';

-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
 import repoInfoFixture from './fixtures/dockerhub-repoinfo.json';
 import repoTagsFixture from './fixtures/dockerhub-repotags.json';
 import repoAllTagsFixture from './fixtures/dockerhub-repoalltags.json';
--- a/tests/exec.test.ts
+++ b/tests/exec.test.ts
@@ -14,14 +14,10 @@
 * limitations under the License.
 */

-import {beforeEach, describe, expect, it, jest} from '@jest/globals';
+import {describe, expect, it, jest} from '@jest/globals';

 import {Exec} from '../src/exec';

-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
 describe('exec', () => {
  it('returns docker version', async () => {
    const execSpy = jest.spyOn(Exec, 'exec');
--- a/tests/fixtures/bake-test-docker-action-remote-private.json
+++ b/tests/fixtures/bake-test-docker-action-remote-private.json
@@ -0,0 +1,11 @@
+{
+  "target": {
+    "default": {
+      "context": "https://github.com/docker/test-docker-action.git#remote-private",
+      "dockerfile": "Dockerfile",
+      "tags": [
+        "foo"
+      ]
+    }
+  }
+}
--- a/tests/fixtures/buildx-refs/group/1fugf958r4peyg86h6scim5t5
+++ b/tests/fixtures/buildx-refs/group/1fugf958r4peyg86h6scim5t5
@@ -0,0 +1 @@
+{"Definition":"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","Targets":["dev"],"Refs":["vzxn0jxr44khtq7hc8drtzwjv"]}
--- a/tests/fixtures/buildx-refs/default/default/36dix0eiv9evr61vrwzn32w7q
+++ b/tests/fixtures/buildx-refs/default/default/36dix0eiv9evr61vrwzn32w7q
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker/docker-alpine-s6","DockerfilePath":""}
--- a/tests/fixtures/buildx-refs/default/default/49p5r8und2konke5pmlyzqp3n
+++ b/tests/fixtures/buildx-refs/default/default/49p5r8und2konke5pmlyzqp3n
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker_org/buildx","DockerfilePath":""}
--- a/tests/fixtures/buildx-refs/default/default/7pnnqpgacnqq98oa1a1h5sz6t
+++ b/tests/fixtures/buildx-refs/default/default/7pnnqpgacnqq98oa1a1h5sz6t
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazy/foo/bar/https:/github.com/docker/actions-toolkit.git#:__tests__/fixtures","DockerfilePath":"/home/crazy/foo/bar/hello.Dockerfile"}
--- a/tests/fixtures/buildx-refs/default/default/84p2qpgacnqq98oa1a1h5sz6t
+++ b/tests/fixtures/buildx-refs/default/default/84p2qpgacnqq98oa1a1h5sz6t
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazy/foo/bar/https:/github.com/docker/actions-toolkit.git#:__tests__/fixtures","DockerfilePath":"/home/crazy/foo/bar/-"}
--- a/tests/fixtures/buildx-refs/default/default/a5s9rlg9cnqq98oa1a1h5sz6t
+++ b/tests/fixtures/buildx-refs/default/default/a5s9rlg9cnqq98oa1a1h5sz6t
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazy/foo/bar/-","DockerfilePath":""}
--- a/tests/fixtures/buildx-refs/default/default/a8zqzhhv5yiazm396jobsgdw2
+++ b/tests/fixtures/buildx-refs/default/default/a8zqzhhv5yiazm396jobsgdw2
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker_org/buildx","DockerfilePath":"/home/crazymax/github/docker_org/buildx/Dockerfile"}
--- a/tests/fixtures/buildx-refs/default/default/aav2ix4nw5eky66fw045dkylr
+++ b/tests/fixtures/buildx-refs/default/default/aav2ix4nw5eky66fw045dkylr
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazy/foo/bar/https:/github.com/docker/buildx.git","DockerfilePath":""}
--- a/tests/fixtures/buildx-refs/default/default/dfsz8r57a98zf789pmlyzqp3n
+++ b/tests/fixtures/buildx-refs/default/default/dfsz8r57a98zf789pmlyzqp3n
@@ -0,0 +1 @@
+{"LocalPath":"https://github.com/docker/actions-toolkit.git#:__tests__/fixtures","DockerfilePath":"hello.Dockerfile"}
--- a/tests/fixtures/buildx-refs/default/default/ij71n3ubmhck85d03zdvye5nr
+++ b/tests/fixtures/buildx-refs/default/default/ij71n3ubmhck85d03zdvye5nr
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker_org/buildx","DockerfilePath":"/home/crazymax/github/docker_org/buildx/Dockerfile"}
--- a/tests/fixtures/buildx-refs/default/default/o1ctbgdb1mwekkxocc6filxde
+++ b/tests/fixtures/buildx-refs/default/default/o1ctbgdb1mwekkxocc6filxde
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker_org/buildx","DockerfilePath":""}
--- a/tests/fixtures/buildx-refs/default/default/qvb2qy61mspqdyzf8whvjy0x1
+++ b/tests/fixtures/buildx-refs/default/default/qvb2qy61mspqdyzf8whvjy0x1
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker_org/buildx","DockerfilePath":"/home/crazymax/github/docker_org/buildx/Dockerfile"}
--- a/tests/fixtures/buildx-refs/default/default/qxu22kx1mrydcjkbl0b0l6es8
+++ b/tests/fixtures/buildx-refs/default/default/qxu22kx1mrydcjkbl0b0l6es8
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazymax/github/docker_org/buildx","DockerfilePath":""}
--- a/tests/fixtures/buildx-refs/default/default/vzxn0jxr44khtq7hc8drtzwjv
+++ b/tests/fixtures/buildx-refs/default/default/vzxn0jxr44khtq7hc8drtzwjv
@@ -0,0 +1 @@
+{"Target":"dev","LocalPath":"/home/crazymax/github/docker_org/docker","DockerfilePath":"/home/crazymax/github/docker_org/docker/Dockerfile","GroupRef":"1fugf958r4peyg86h6scim5t5"}
--- a/tests/fixtures/buildx-refs/default/default/w38vcd5fo5cfvfyig77qjec0v
+++ b/tests/fixtures/buildx-refs/default/default/w38vcd5fo5cfvfyig77qjec0v
@@ -0,0 +1 @@
+{"LocalPath":"/home/crazy/hello","DockerfilePath":"/home/crazy/hello/-"}
--- a/tests/fixtures/buildx-refs/foo/foo0/21hqcxmgxyhugz2m24tmi7xco
+++ b/tests/fixtures/buildx-refs/foo/foo0/21hqcxmgxyhugz2m24tmi7xco
@@ -0,0 +1 @@
+{"Target":"default","LocalPath":"/home/crazymax/github/docker_org/compose/.dev/47231","DockerfilePath":"/home/crazymax/github/docker_org/compose/.dev/47231/bad/Dockerfile"}
--- a/tests/fixtures/buildx-refs/foo/foo0/5nm14argzndbc4hw1jx6v9d5k
+++ b/tests/fixtures/buildx-refs/foo/foo0/5nm14argzndbc4hw1jx6v9d5k
@@ -0,0 +1 @@
+{"Target":"default","LocalPath":"/home/crazymax/github/docker_org/compose/.dev/47231","DockerfilePath":"/home/crazymax/github/docker_org/compose/.dev/47231/bad/Dockerfile"}
--- a/tests/fixtures/buildx-refs/foo/foo0/7dblgs0dsjm22ti6p53sih6b7
+++ b/tests/fixtures/buildx-refs/foo/foo0/7dblgs0dsjm22ti6p53sih6b7
@@ -0,0 +1 @@
+{"Target":"default","LocalPath":"/home/crazymax/github/docker_org/compose/.dev/47231","DockerfilePath":"/home/crazymax/github/docker_org/compose/.dev/47231/bad/Dockerfile"}
--- a/tests/fixtures/hello-bake.hcl
+++ b/tests/fixtures/hello-bake.hcl
@@ -0,0 +1,39 @@
+// Copyright 2024 actions-toolkit authors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//    http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+target "hello" {
+  dockerfile = "hello.Dockerfile"
+}
+
+target "hello-bar" {
+  dockerfile = "hello.Dockerfile"
+  args = {
+    NAME = "bar"
+  }
+}
+
+group "hello-all" {
+  targets = ["hello", "hello-bar"]
+}
+
+target "hello-matrix" {
+  name = "matrix-${name}"
+  matrix = {
+    name = ["bar", "baz", "boo", "far", "faz", "foo", "aaa", "bbb", "ccc", "ddd", "eee", "fff", "ggg", "hhh", "iii", "jjj"]
+  }
+  dockerfile = "hello.Dockerfile"
+  args = {
+    NAME = name
+  }
+}
--- a/tests/fixtures/hello-err.Dockerfile
+++ b/tests/fixtures/hello-err.Dockerfile
@@ -0,0 +1,19 @@
+# syntax=docker/dockerfile:1
+
+# Copyright 2024 actions-toolkit authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+FROM busybox:latest
+ARGGG NAME=foo
+RUN echo "hello $NAME"
--- a/tests/fixtures/hello.Dockerfile
+++ b/tests/fixtures/hello.Dockerfile
@@ -0,0 +1,23 @@
+# syntax=docker/dockerfile:1
+
+# Copyright 2024 actions-toolkit authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+FROM busybox AS build
+ARG NAME=foo
+ARG TARGETPLATFORM
+RUN echo "Hello $NAME from $TARGETPLATFORM" > foo
+
+FROM scratch
+COPY --from=build /foo /
--- a/tests/fixtures/inspect11.txt
+++ b/tests/fixtures/inspect11.txt
@@ -0,0 +1,39 @@
+Name:          builder
+Driver:        docker-container
+Last Activity: 2024-03-01 14:25:03 +0000 UTC
+
+Nodes:
+Name:                  builder0
+Endpoint:              unix:///var/run/docker.sock
+Driver Options:        env.JAEGER_TRACE="localhost:6831" image="moby/buildkit:master" network="host" env.BUILDKIT_STEP_LOG_MAX_SIZE="10485760" env.BUILDKIT_STEP_LOG_MAX_SPEED="10485760"
+Status:                running
+BuildKit daemon flags: --debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host --allow-insecure-entitlement=network.host
+BuildKit version:      37657a1
+Platforms:             linux/amd64, linux/amd64/v2, linux/amd64/v3, linux/arm64, linux/riscv64, linux/ppc64le, linux/s390x, linux/386, linux/mips64le, linux/mips64, linux/arm/v7, linux/arm/v6
+Features:
+ Cache export:         true
+ Docker exporter:      true
+ Multi-platform build: true
+ OCI exporter:         true
+Labels:
+ org.mobyproject.buildkit.worker.executor:         oci
+ org.mobyproject.buildkit.worker.hostname:         docker-desktop
+ org.mobyproject.buildkit.worker.network:          host
+ org.mobyproject.buildkit.worker.oci.process-mode: sandbox
+ org.mobyproject.buildkit.worker.selinux.enabled:  false
+ org.mobyproject.buildkit.worker.snapshotter:      overlayfs
+GC Policy rule#0:
+ All:           false
+ Filters:       type==source.local,type==exec.cachemount,type==source.git.checkout
+ Keep Duration: 48h0m0s
+ Keep Bytes:    488.3MiB
+GC Policy rule#1:
+ All:           false
+ Keep Duration: 1440h0m0s
+ Keep Bytes:    94.06GiB
+GC Policy rule#2:
+ All:        false
+ Keep Bytes: 94.06GiB
+GC Policy rule#3:
+ All:        true
+ Keep Bytes: 94.06GiB
--- a/tests/fixtures/lint.Dockerfile
+++ b/tests/fixtures/lint.Dockerfile
@@ -0,0 +1,28 @@
+# syntax=docker/dockerfile-upstream:master
+
+# Copyright 2024 actions-toolkit authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+frOM busybox as base
+cOpy lint.Dockerfile .
+
+from scratch
+MAINTAINER moby@example.com
+COPy --from=base \
+  /lint.Dockerfile \
+  /
+
+CMD [ "echo", "Hello, Norway!" ]
+CMD [ "echo", "Hello, Sweden!" ]
+ENTRYPOINT my-program start
--- a/tests/fixtures/metadata.json
+++ b/tests/fixtures/metadata.json
@@ -0,0 +1,228 @@
+{
+  "buildx.build.provenance": {
+    "buildType": "https://mobyproject.org/buildkit@v1",
+    "materials": [
+      {
+        "uri": "pkg:docker/docker/dockerfile-upstream@master",
+        "digest": {
+          "sha256": "70433342168dafa34d11bd7236c3c3fcf448b90539733281711050808f32e835"
+        }
+      },
+      {
+        "uri": "pkg:docker/busybox@latest?platform=linux%2Famd64",
+        "digest": {
+          "sha256": "9ae97d36d26566ff84e8893c64a6dc4fe8ca6d1144bf5b87b2b85a32def253c7"
+        }
+      }
+    ],
+    "invocation": {
+      "configSource": {
+        "entryPoint": "Dockerfile"
+      },
+      "parameters": {
+        "frontend": "gateway.v0",
+        "args": {
+          "cmdline": "docker/dockerfile-upstream:master",
+          "source": "docker/dockerfile-upstream:master"
+        },
+        "locals": [
+          {
+            "name": "context"
+          },
+          {
+            "name": "dockerfile"
+          }
+        ]
+      },
+      "environment": {
+        "platform": "linux/amd64"
+      }
+    }
+  },
+  "buildx.build.ref": "default/default/n6ibcp9b2pw108rrz7ywdznvo",
+  "buildx.build.warnings": [
+    {
+      "vertex": "sha256:7b477ac5dd3a4c4d2523f7f7f20406b626395de082f44fd5ff996323ec8257d0",
+      "level": 1,
+      "short": "Q29uc2lzdGVudEluc3RydWN0aW9uQ2FzaW5nOiBDb21tYW5kICdmck9NJyBzaG91bGQgYmUgY29uc2lzdGVudGx5IGNhc2VkIChsaW5lIDIp",
+      "detail": [
+        "SW5zdHJ1Y3Rpb25zIHNob3VsZCBiZSBpbiBjb25zaXN0ZW50IGNhc2luZyAoYWxsIGxvd2VyIG9yIGFsbCB1cHBlcik="
+      ],
+      "url": "https://docs.docker.com/go/dockerfile/rule/consistent-instruction-casing/",
+      "sourceInfo": {
+        "filename": "Dockerfile",
+        "data": "IyBzeW50YXg9ZG9ja2VyL2RvY2tlcmZpbGUtdXBzdHJlYW06bWFzdGVyCmZyT00gYnVzeWJveCBhcyBiYXNlCmNPcHkgRG9ja2VyZmlsZSAuCgpmcm9tIHNjcmF0Y2gKQ09QeSAtLWZyb209YmFzZSBcCiAgL0RvY2tlcmZpbGUgXAogIC8K",
+        "definition": {
+          "def": [
+            "GsUBChJsb2NhbDovL2RvY2tlcmZpbGUSFAoMbG9jYWwuZGlmZmVyEgRub25lEkoKEWxvY2FsLmZvbGxvd3BhdGhzEjVbIkRvY2tlcmZpbGUiLCJEb2NrZXJmaWxlLmRvY2tlcmlnbm9yZSIsImRvY2tlcmZpbGUiXRIqCg1sb2NhbC5zZXNzaW9uEhkwN3A3MzJ6aGR4NXV1NnVsZDNzOGpteWo2EiEKE2xvY2FsLnNoYXJlZGtleWhpbnQSCmRvY2tlcmZpbGVaAA==",
+            "CkkKR3NoYTI1Njo3YjQ3N2FjNWRkM2E0YzRkMjUyM2Y3ZjdmMjA0MDZiNjI2Mzk1ZGUwODJmNDRmZDVmZjk5NjMyM2VjODI1N2Qw"
+          ],
+          "metadata": {
+            "sha256:7b477ac5dd3a4c4d2523f7f7f20406b626395de082f44fd5ff996323ec8257d0": {
+              "description": {
+                "llb.customname": "[internal] load build definition from Dockerfile"
+              },
+              "caps": {
+                "source.local": true,
+                "source.local.followpaths": true,
+                "source.local.sessionid": true,
+                "source.local.sharedkeyhint": true
+              }
+            },
+            "sha256:a06279dbe062a3b181c9b918abfaf37ca8106f1f9745b9d42356b3195b205cd1": {
+              "caps": {
+                "constraints": true,
+                "meta.description": true,
+                "platform": true
+              }
+            }
+          },
+          "Source": {
+            "locations": {
+              "sha256:7b477ac5dd3a4c4d2523f7f7f20406b626395de082f44fd5ff996323ec8257d0": {}
+            }
+          }
+        },
+        "language": "Dockerfile"
+      },
+      "range": [
+        {
+          "start": {
+            "line": 2
+          },
+          "end": {
+            "line": 2
+          }
+        }
+      ]
+    },
+    {
+      "vertex": "sha256:7b477ac5dd3a4c4d2523f7f7f20406b626395de082f44fd5ff996323ec8257d0",
+      "level": 1,
+      "short": "Q29uc2lzdGVudEluc3RydWN0aW9uQ2FzaW5nOiBDb21tYW5kICdjT3B5JyBzaG91bGQgYmUgY29uc2lzdGVudGx5IGNhc2VkIChsaW5lIDMp",
+      "detail": [
+        "SW5zdHJ1Y3Rpb25zIHNob3VsZCBiZSBpbiBjb25zaXN0ZW50IGNhc2luZyAoYWxsIGxvd2VyIG9yIGFsbCB1cHBlcik="
+      ],
+      "url": "https://docs.docker.com/go/dockerfile/rule/consistent-instruction-casing/",
+      "sourceInfo": {
+        "filename": "Dockerfile",
+        "data": "IyBzeW50YXg9ZG9ja2VyL2RvY2tlcmZpbGUtdXBzdHJlYW06bWFzdGVyCmZyT00gYnVzeWJveCBhcyBiYXNlCmNPcHkgRG9ja2VyZmlsZSAuCgpmcm9tIHNjcmF0Y2gKQ09QeSAtLWZyb209YmFzZSBcCiAgL0RvY2tlcmZpbGUgXAogIC8K",
+        "definition": {
+          "def": [
+            "GsUBChJsb2NhbDovL2RvY2tlcmZpbGUSFAoMbG9jYWwuZGlmZmVyEgRub25lEkoKEWxvY2FsLmZvbGxvd3BhdGhzEjVbIkRvY2tlcmZpbGUiLCJEb2NrZXJmaWxlLmRvY2tlcmlnbm9yZSIsImRvY2tlcmZpbGUiXRIqCg1sb2NhbC5zZXNzaW9uEhkwN3A3MzJ6aGR4NXV1NnVsZDNzOGpteWo2EiEKE2xvY2FsLnNoYXJlZGtleWhpbnQSCmRvY2tlcmZpbGVaAA==",
+            "CkkKR3NoYTI1Njo3YjQ3N2FjNWRkM2E0YzRkMjUyM2Y3ZjdmMjA0MDZiNjI2Mzk1ZGUwODJmNDRmZDVmZjk5NjMyM2VjODI1N2Qw"
+          ],
+          "metadata": {
+            "sha256:7b477ac5dd3a4c4d2523f7f7f20406b626395de082f44fd5ff996323ec8257d0": {
+              "description": {
+                "llb.customname": "[internal] load build definition from Dockerfile"
+              },
+              "caps": {
+                "source.local": true,
+                "source.local.followpaths": true,
+                "source.local.sessionid": true,
+                "source.local.sharedkeyhint": true
+              }
+            },
+            "sha256:a06279dbe062a3b181c9b918abfaf37ca8106f1f9745b9d42356b3195b205cd1": {
+              "caps": {
+                "constraints": true,
+                "meta.description": true,
+                "platform": true
+              }
+            }
+          },
+          "Source": {
+            "locations": {
+              "sha256:7b477ac5dd3a4c4d2523f7f7f20406b626395de082f44fd5ff996323ec8257d0": {}
+            }
+          }
+        },
+        "language": "Dockerfile"
+      },
+      "range": [
+        {
+          "start": {
+            "line": 3
+          },
+          "end": {
+            "line": 3
+          }
+        }
+      ]
+    },
+    {
+      "vertex": "sha256:7b477ac5dd3a4c4d2523f7f7f20406b626395de082f44fd5ff996323ec8257d0",
+      "level": 1,
+      "short": "Q29uc2lzdGVudEluc3RydWN0aW9uQ2FzaW5nOiBDb21tYW5kICdDT1B5JyBzaG91bGQgYmUgY29uc2lzdGVudGx5IGNhc2VkIChsaW5lIDYp",
+      "detail": [
+        "SW5zdHJ1Y3Rpb25zIHNob3VsZCBiZSBpbiBjb25zaXN0ZW50IGNhc2luZyAoYWxsIGxvd2VyIG9yIGFsbCB1cHBlcik="
+      ],
+      "url": "https://docs.docker.com/go/dockerfile/rule/consistent-instruction-casing/",
+      "sourceInfo": {
+        "filename": "Dockerfile",
+        "data": "IyBzeW50YXg9ZG9ja2VyL2RvY2tlcmZpbGUtdXBzdHJlYW06bWFzdGVyCmZyT00gYnVzeWJveCBhcyBiYXNlCmNPcHkgRG9ja2VyZmlsZSAuCgpmcm9tIHNjcmF0Y2gKQ09QeSAtLWZyb209YmFzZSBcCiAgL0RvY2tlcmZpbGUgXAogIC8K",
+        "definition": {
+          "def": [
+            "GsUBChJsb2NhbDovL2RvY2tlcmZpbGUSFAoMbG9jYWwuZGlmZmVyEgRub25lEkoKEWxvY2FsLmZvbGxvd3BhdGhzEjVbIkRvY2tlcmZpbGUiLCJEb2NrZXJmaWxlLmRvY2tlcmlnbm9yZSIsImRvY2tlcmZpbGUiXRIqCg1sb2NhbC5zZXNzaW9uEhkwN3A3MzJ6aGR4NXV1NnVsZDNzOGpteWo2EiEKE2xvY2FsLnNoYXJlZGtleWhpbnQSCmRvY2tlcmZpbGVaAA==",
+            "CkkKR3NoYTI1Njo3YjQ3N2FjNWRkM2E0YzRkMjUyM2Y3ZjdmMjA0MDZiNjI2Mzk1ZGUwODJmNDRmZDVmZjk5NjMyM2VjODI1N2Qw"
+          ],
+          "metadata": {
+            "sha256:7b477ac5dd3a4c4d2523f7f7f20406b626395de082f44fd5ff996323ec8257d0": {
+              "description": {
+                "llb.customname": "[internal] load build definition from Dockerfile"
+              },
+              "caps": {
+                "source.local": true,
+                "source.local.followpaths": true,
+                "source.local.sessionid": true,
+                "source.local.sharedkeyhint": true
+              }
+            },
+            "sha256:a06279dbe062a3b181c9b918abfaf37ca8106f1f9745b9d42356b3195b205cd1": {
+              "caps": {
+                "constraints": true,
+                "meta.description": true,
+                "platform": true
+              }
+            }
+          },
+          "Source": {
+            "locations": {
+              "sha256:7b477ac5dd3a4c4d2523f7f7f20406b626395de082f44fd5ff996323ec8257d0": {}
+            }
+          }
+        },
+        "language": "Dockerfile"
+      },
+      "range": [
+        {
+          "start": {
+            "line": 6
+          },
+          "end": {
+            "line": 6
+          }
+        },
+        {
+          "start": {
+            "line": 7
+          },
+          "end": {
+            "line": 7
+          }
+        },
+        {
+          "start": {
+            "line": 8
+          },
+          "end": {
+            "line": 8
+          }
+        }
+      ]
+    }
+  ],
+  "containerimage.config.digest": "sha256:059b68a595b22564a1cbc167f369349fdc2ecc1f7bc092c2235cbf601a795fd",
+  "containerimage.digest": "sha256:b09b9482c72371486bb2c1d2c2a2633ed1d0b8389e12c8d52b9e052725c0c83c"
+}
--- a/tests/fixtures/oci-archive/crazy-max~docker-alpine-s6~II9A63.dockerbuild
+++ b/tests/fixtures/oci-archive/crazy-max~docker-alpine-s6~II9A63.dockerbuild
--- a/tests/fixtures/oci-archive/docker~test-docker-action~COIO50.dockerbuild
+++ b/tests/fixtures/oci-archive/docker~test-docker-action~COIO50.dockerbuild
--- a/tests/fixtures/oci-archive/docker~test-docker-action~SNHBPN+3.dockerbuild
+++ b/tests/fixtures/oci-archive/docker~test-docker-action~SNHBPN+3.dockerbuild
--- a/tests/fixtures/oci-archive/docker~test-docker-action~TYO4JJ+15.dockerbuild
+++ b/tests/fixtures/oci-archive/docker~test-docker-action~TYO4JJ+15.dockerbuild
--- a/tests/fixtures/oci-archive/hello-oci-gzip.tar
+++ b/tests/fixtures/oci-archive/hello-oci-gzip.tar
--- a/tests/fixtures/oci-archive/hello-oci-multiplatform-gzip.tar
+++ b/tests/fixtures/oci-archive/hello-oci-multiplatform-gzip.tar
--- a/tests/fixtures/oci-archive/hello-oci-uncompressed.tar
+++ b/tests/fixtures/oci-archive/hello-oci-uncompressed.tar
--- a/tests/fixtures/oci-archive/hello-oci-zstd.tar
+++ b/tests/fixtures/oci-archive/hello-oci-zstd.tar
--- a/tests/fixtures/oci-archive/moby~buildkit~LWDOW6.dockerbuild
+++ b/tests/fixtures/oci-archive/moby~buildkit~LWDOW6.dockerbuild
--- a/tests/git.test.ts
+++ b/tests/git.test.ts
@@ -21,7 +21,6 @@ import {Exec} from '../src/exec';
 import {ExecOutput} from '@actions/exec';

 beforeEach(() => {
-  jest.clearAllMocks();
  jest.restoreAllMocks();
 });

@@ -165,6 +164,30 @@ describe('ref', () => {
    expect(ref).toEqual('refs/tags/8.0.0');
  });

+  it('returns mocked detached pull request merge ref (shallow clone)', async () => {
+    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
+      const fullCmd = `${cmd} ${args?.join(' ')}`;
+      let result = '';
+      switch (fullCmd) {
+        case 'git branch --show-current':
+          result = '';
+          break;
+        case 'git show -s --pretty=%D':
+          result = 'grafted, HEAD, pull/221/merge';
+          break;
+      }
+      return Promise.resolve({
+        stdout: result,
+        stderr: '',
+        exitCode: 0
+      });
+    });
+
+    const ref = await Git.ref();
+
+    expect(ref).toEqual('refs/pull/221/merge');
+  });
+
  it('should throws an error when detached HEAD ref is not supported', async () => {
    jest.spyOn(Exec, 'getExecOutput').mockImplementation((cmd, args): Promise<ExecOutput> => {
      const fullCmd = `${cmd} ${args?.join(' ')}`;
--- a/tests/github.test.itg.ts
+++ b/tests/github.test.itg.ts
@@ -0,0 +1,297 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {describe, expect, it, test} from '@jest/globals';
+import fs from 'fs';
+import * as path from 'path';
+
+import {Buildx} from '../src/buildx/buildx';
+import {Bake} from '../src/buildx/bake';
+import {Build} from '../src/buildx/build';
+import {Exec} from '../src/exec';
+import {GitHub} from '../src/github';
+import {History} from '../src/buildx/history';
+
+const fixturesDir = path.join(__dirname, 'fixtures');
+
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'github-jest');
+
+const maybe = !process.env.GITHUB_ACTIONS || (process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu')) ? describe : describe.skip;
+
+maybe('uploadArtifact', () => {
+  it('uploads an artifact', async () => {
+    const res = await GitHub.uploadArtifact({
+      filename: path.join(fixturesDir, 'github-repo.json'),
+      mimeType: 'application/json',
+      retentionDays: 1
+    });
+    expect(res).toBeDefined();
+    console.log('uploadArtifactResponse', res);
+    expect(res?.url).toBeDefined();
+  });
+});
+
+maybe('writeBuildSummary', () => {
+  // prettier-ignore
+  test.each([
+    [
+      "single",
+      [
+        'build',
+        '-f', path.join(fixturesDir, 'hello.Dockerfile'),
+        fixturesDir
+      ],
+    ],
+    [
+      "multiplatform",
+      [
+        'build',
+        '-f', path.join(fixturesDir, 'hello.Dockerfile'),
+        '--platform', 'linux/amd64,linux/arm64',
+        fixturesDir
+      ],
+    ]
+  ])('write build summary %p', async (_, bargs) => {
+    const buildx = new Buildx();
+    const build = new Build({buildx: buildx});
+
+    fs.mkdirSync(tmpDir, {recursive: true});
+    await expect(
+      (async () => {
+        // prettier-ignore
+        const buildCmd = await buildx.getCommand([
+          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+          ...bargs,
+          '--metadata-file', build.getMetadataFilePath()
+        ]);
+        await Exec.exec(buildCmd.command, buildCmd.args);
+      })()
+    ).resolves.not.toThrow();
+
+    const metadata = build.resolveMetadata();
+    expect(metadata).toBeDefined();
+    const buildRef = build.resolveRef(metadata);
+    expect(buildRef).toBeDefined();
+
+    const history = new History({buildx: buildx});
+    const exportRes = await history.export({
+      refs: [buildRef ?? '']
+    });
+    expect(exportRes).toBeDefined();
+    expect(exportRes?.dockerbuildFilename).toBeDefined();
+    expect(exportRes?.dockerbuildSize).toBeDefined();
+    expect(exportRes?.summaries).toBeDefined();
+
+    const uploadRes = await GitHub.uploadArtifact({
+      filename: exportRes?.dockerbuildFilename,
+      mimeType: 'application/gzip',
+      retentionDays: 1
+    });
+    expect(uploadRes).toBeDefined();
+    expect(uploadRes?.url).toBeDefined();
+
+    await GitHub.writeBuildSummary({
+      exportRes: exportRes,
+      uploadRes: uploadRes,
+      inputs: {
+        context: fixturesDir,
+        file: path.join(fixturesDir, 'hello.Dockerfile')
+      }
+    });
+  });
+
+  // prettier-ignore
+  test.each([
+    [
+      'single',
+      path.join(fixturesDir, 'hello-bake.hcl'),
+      'hello'
+    ],
+    [
+      'group',
+      path.join(fixturesDir, 'hello-bake.hcl'),
+      'hello-all'
+    ],
+    [
+      'matrix',
+      path.join(fixturesDir, 'hello-bake.hcl'),
+      'hello-matrix'
+    ]
+  ])('write bake summary %p', async (_, file, target) => {
+    const buildx = new Buildx();
+    const bake = new Bake({buildx: buildx});
+
+    fs.mkdirSync(tmpDir, {recursive: true});
+    await expect(
+      (async () => {
+        // prettier-ignore
+        const buildCmd = await buildx.getCommand([
+          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+          'bake',
+          '-f', file,
+          target,
+          '--metadata-file', bake.getMetadataFilePath()
+        ]);
+        await Exec.exec(buildCmd.command, buildCmd.args, {
+          cwd: fixturesDir
+        });
+      })()
+    ).resolves.not.toThrow();
+
+    const definition = await bake.getDefinition(
+      {
+        files: [file],
+        targets: [target],
+      },
+      {
+        cwd: fixturesDir
+      }
+    );
+
+    const metadata = bake.resolveMetadata();
+    expect(metadata).toBeDefined();
+    const buildRefs = bake.resolveRefs(metadata);
+    expect(buildRefs).toBeDefined();
+
+    const history = new History({buildx: buildx});
+    const exportRes = await history.export({
+      refs: buildRefs ?? []
+    });
+    expect(exportRes).toBeDefined();
+    expect(exportRes?.dockerbuildFilename).toBeDefined();
+    expect(exportRes?.dockerbuildSize).toBeDefined();
+    expect(exportRes?.summaries).toBeDefined();
+
+    const uploadRes = await GitHub.uploadArtifact({
+      filename: exportRes?.dockerbuildFilename,
+      mimeType: 'application/gzip',
+      retentionDays: 1
+    });
+    expect(uploadRes).toBeDefined();
+    expect(uploadRes?.url).toBeDefined();
+
+    await GitHub.writeBuildSummary({
+      exportRes: exportRes,
+      uploadRes: uploadRes,
+      inputs: {
+        files: path.join(fixturesDir, 'hello-bake.hcl')
+      },
+      bakeDefinition: definition
+    });
+  });
+
+  it('fails with dockerfile syntax issue', async () => {
+    const startedTime = new Date();
+    const buildx = new Buildx();
+    const build = new Build({buildx: buildx});
+
+    fs.mkdirSync(tmpDir, {recursive: true});
+    await expect(
+      (async () => {
+        // prettier-ignore
+        const buildCmd = await buildx.getCommand([
+          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+          'build',
+          '-f', path.join(fixturesDir, 'hello-err.Dockerfile'),
+          fixturesDir,
+          '--metadata-file', build.getMetadataFilePath()
+        ]);
+        await Exec.exec(buildCmd.command, buildCmd.args);
+      })()
+    ).rejects.toThrow();
+
+    const refs = Buildx.refs({
+      dir: Buildx.refsDir,
+      builderName: process.env.CTN_BUILDER_NAME ?? 'default',
+      since: startedTime
+    });
+    expect(refs).toBeDefined();
+    expect(Object.keys(refs).length).toBeGreaterThan(0);
+
+    const history = new History({buildx: buildx});
+    const exportRes = await history.export({
+      refs: [Object.keys(refs)[0] ?? '']
+    });
+    expect(exportRes).toBeDefined();
+    expect(exportRes?.dockerbuildFilename).toBeDefined();
+    expect(exportRes?.dockerbuildSize).toBeDefined();
+    expect(exportRes?.summaries).toBeDefined();
+
+    const uploadRes = await GitHub.uploadArtifact({
+      filename: exportRes?.dockerbuildFilename,
+      mimeType: 'application/gzip',
+      retentionDays: 1
+    });
+    expect(uploadRes).toBeDefined();
+    expect(uploadRes?.url).toBeDefined();
+
+    await GitHub.writeBuildSummary({
+      exportRes: exportRes,
+      uploadRes: uploadRes,
+      inputs: {
+        context: fixturesDir,
+        file: path.join(fixturesDir, 'hello-err.Dockerfile')
+      }
+    });
+  });
+
+  it('without build record', async () => {
+    const startedTime = new Date();
+    const buildx = new Buildx();
+    const build = new Build({buildx: buildx});
+
+    fs.mkdirSync(tmpDir, {recursive: true});
+    await expect(
+      (async () => {
+        // prettier-ignore
+        const buildCmd = await buildx.getCommand([
+          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+          'build',
+          '-f', path.join(fixturesDir, 'hello.Dockerfile'),
+          fixturesDir,
+          '--metadata-file', build.getMetadataFilePath()
+        ]);
+        await Exec.exec(buildCmd.command, buildCmd.args);
+      })()
+    ).resolves.not.toThrow();
+
+    const refs = Buildx.refs({
+      dir: Buildx.refsDir,
+      builderName: process.env.CTN_BUILDER_NAME ?? 'default',
+      since: startedTime
+    });
+    expect(refs).toBeDefined();
+    expect(Object.keys(refs).length).toBeGreaterThan(0);
+
+    const history = new History({buildx: buildx});
+    const exportRes = await history.export({
+      refs: [Object.keys(refs)[0] ?? '']
+    });
+    expect(exportRes).toBeDefined();
+    expect(exportRes?.dockerbuildFilename).toBeDefined();
+    expect(exportRes?.dockerbuildSize).toBeDefined();
+    expect(exportRes?.summaries).toBeDefined();
+
+    await GitHub.writeBuildSummary({
+      exportRes: exportRes,
+      inputs: {
+        context: fixturesDir,
+        file: path.join(fixturesDir, 'hello.Dockerfile')
+      }
+    });
+  });
+});
--- a/tests/github.test.ts
+++ b/tests/github.test.ts
@@ -22,17 +22,13 @@ import * as core from '@actions/core';
 import {GitHub} from '../src/github';
 import {GitHubRepo} from '../src/types/github';

-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
 import repoFixture from './fixtures/github-repo.json';
 jest.spyOn(GitHub.prototype, 'repoData').mockImplementation((): Promise<GitHubRepo> => {
  return <Promise<GitHubRepo>>(repoFixture as unknown);
 });

 describe('repoData', () => {
-  it('returns GitHub repository', async () => {
+  it('returns GitHub repo data', async () => {
    const github = new GitHub();
    expect((await github.repoData()).name).toEqual('Hello-World');
  });
@@ -89,6 +85,21 @@ describe('apiURL', () => {
  });
 });

+describe('repository', () => {
+  it('returns GitHub repository', async () => {
+    expect(GitHub.repository).toEqual('docker/actions-toolkit');
+  });
+});
+
+describe('workflowRunURL', () => {
+  it('returns 2188748038', async () => {
+    expect(GitHub.workflowRunURL()).toEqual('https://github.com/docker/actions-toolkit/actions/runs/2188748038');
+  });
+  it('returns 2188748038 with attempts 2', async () => {
+    expect(GitHub.workflowRunURL(true)).toEqual('https://github.com/docker/actions-toolkit/actions/runs/2188748038/attempts/2');
+  });
+});
+
 describe('actionsRuntimeToken', () => {
  const originalEnv = process.env;
  beforeEach(() => {
--- a/tests/oci/oci.test.ts
+++ b/tests/oci/oci.test.ts
@@ -0,0 +1,46 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {afterEach, describe, expect, test} from '@jest/globals';
+import * as fs from 'fs';
+import path from 'path';
+import * as rimraf from 'rimraf';
+
+import {OCI} from '../../src/oci/oci';
+
+const fixturesDir = path.join(__dirname, '..', 'fixtures');
+
+// prettier-ignore
+const tmpDir = path.join(process.env.TEMP || '/tmp', 'docker-jest');
+
+afterEach(function () {
+  rimraf.sync(tmpDir);
+});
+
+describe('loadArchive', () => {
+  // prettier-ignore
+  test.each(fs.readdirSync(path.join(fixturesDir, 'oci-archive')).filter(file => {
+      return fs.statSync(path.join(path.join(fixturesDir, 'oci-archive'), file)).isFile();
+    }).map(filename => [filename]))('extracting %p', async (filename) => {
+    const res = await OCI.loadArchive({
+      file: path.join(fixturesDir, 'oci-archive', filename)
+    });
+    expect(res).toBeDefined();
+    expect(res?.root.index).toBeDefined();
+    expect(res?.root.layout).toBeDefined();
+    // console.log(JSON.stringify(res, null, 2));
+  });
+});
--- a/tests/testResultsProcessor.ts
+++ b/tests/testResultsProcessor.ts
@@ -0,0 +1,30 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const fs = require('fs');
+
+module.exports = results => {
+  const allSkipped = results.testResults.every(result => {
+    return result.skipped;
+  });
+  if (allSkipped) {
+    console.log('All tests were skipped!');
+    // create an empty file to signal that all tests were skipped for CI
+    fs.closeSync(fs.openSync('./coverage/allSkipped.txt', 'w'));
+  }
+  return results;
+};
--- a/tests/util.test.ts
+++ b/tests/util.test.ts
@@ -14,16 +14,12 @@
 * limitations under the License.
 */

-import {beforeEach, describe, expect, it, jest, test} from '@jest/globals';
+import {describe, expect, it, test} from '@jest/globals';
 import * as fs from 'fs';
 import * as path from 'path';

 import {Util} from '../src/util';

-beforeEach(() => {
-  jest.clearAllMocks();
-});
-
 describe('getInputList', () => {
  it('single line correctly', async () => {
    await setInput('foo', 'bar');
@@ -31,6 +27,12 @@ describe('getInputList', () => {
    expect(res).toEqual(['bar']);
  });

+  it('empty correctly', async () => {
+    setInput('foo', '');
+    const res = Util.getInputList('foo');
+    expect(res).toEqual([]);
+  });
+
  it('multiline correctly', async () => {
    setInput('foo', 'bar\nbaz');
    const res = Util.getInputList('foo');
@@ -191,6 +193,12 @@ ccccccccc`,
      'FOO=bar'
    ]);
  });
+
+  it('keep quotes', async () => {
+    const output = `type=image,"name=ghcr.io/nginxinc/nginx-unprivileged,docker.io/nginxinc/nginx-unprivileged",push-by-digest=true,name-canonical=true,push=true`;
+    setInput('outputs', output);
+    expect(Util.getInputList('outputs', {ignoreComma: true, quote: false})).toEqual([output]);
+  });
 });

 describe('asyncForEach', () => {
@@ -267,6 +275,175 @@ describe('trimSuffix', () => {
  });
 });

+describe('hash', () => {
+  it('returns 2c26b46b68ffc68ff99b453c1d30413413422d706483bfa0f98a5e886266e7ae', async () => {
+    expect(Util.hash('foo')).toEqual('2c26b46b68ffc68ff99b453c1d30413413422d706483bfa0f98a5e886266e7ae');
+  });
+});
+
+// https://github.com/golang/go/blob/f6b93a4c358b28b350dd8fe1780c1f78e520c09c/src/strconv/atob_test.go#L36-L58
+describe('parseBool', () => {
+  [
+    {input: '', expected: false, throwsError: true},
+    {input: 'asdf', expected: false, throwsError: true},
+    {input: '0', expected: false, throwsError: false},
+    {input: 'f', expected: false, throwsError: false},
+    {input: 'F', expected: false, throwsError: false},
+    {input: 'FALSE', expected: false, throwsError: false},
+    {input: 'false', expected: false, throwsError: false},
+    {input: 'False', expected: false, throwsError: false},
+    {input: '1', expected: true, throwsError: false},
+    {input: 't', expected: true, throwsError: false},
+    {input: 'T', expected: true, throwsError: false},
+    {input: 'TRUE', expected: true, throwsError: false},
+    {input: 'true', expected: true, throwsError: false},
+    {input: 'True', expected: true, throwsError: false}
+  ].forEach(({input, expected, throwsError}) => {
+    test(`parseBool("${input}")`, () => {
+      if (throwsError) {
+        // eslint-disable-next-line jest/no-conditional-expect
+        expect(() => Util.parseBool(input)).toThrow();
+      } else {
+        // eslint-disable-next-line jest/no-conditional-expect
+        expect(Util.parseBool(input)).toBe(expected);
+      }
+    });
+  });
+});
+
+describe('formatFileSize', () => {
+  test('should return "0 Bytes" when given 0 bytes', () => {
+    expect(Util.formatFileSize(0)).toBe('0 Bytes');
+  });
+  test('should format bytes to KB correctly', () => {
+    expect(Util.formatFileSize(1024)).toBe('1 KB');
+    expect(Util.formatFileSize(2048)).toBe('2 KB');
+    expect(Util.formatFileSize(1500)).toBe('1.46 KB');
+  });
+  test('should format bytes to MB correctly', () => {
+    expect(Util.formatFileSize(1024 * 1024)).toBe('1 MB');
+    expect(Util.formatFileSize(2.5 * 1024 * 1024)).toBe('2.5 MB');
+    expect(Util.formatFileSize(3.8 * 1024 * 1024)).toBe('3.8 MB');
+  });
+  test('should format bytes to GB correctly', () => {
+    expect(Util.formatFileSize(1024 * 1024 * 1024)).toBe('1 GB');
+    expect(Util.formatFileSize(2.5 * 1024 * 1024 * 1024)).toBe('2.5 GB');
+    expect(Util.formatFileSize(3.8 * 1024 * 1024 * 1024)).toBe('3.8 GB');
+  });
+  test('should format bytes to TB correctly', () => {
+    expect(Util.formatFileSize(1024 * 1024 * 1024 * 1024)).toBe('1 TB');
+    expect(Util.formatFileSize(2.5 * 1024 * 1024 * 1024 * 1024)).toBe('2.5 TB');
+    expect(Util.formatFileSize(3.8 * 1024 * 1024 * 1024 * 1024)).toBe('3.8 TB');
+  });
+});
+
+describe('generateRandomString', () => {
+  it('should generate a random string of default length 10', async () => {
+    const res = Util.generateRandomString();
+    expect(typeof res).toBe('string');
+    expect(res.length).toBe(10);
+    expect(/^[0-9a-f]+$/i.test(res)).toBe(true);
+  });
+  it('should generate a random string of specified length', async () => {
+    const length = 15;
+    const res = Util.generateRandomString(length);
+    expect(typeof res).toBe('string');
+    expect(res.length).toBe(15);
+    expect(/^[0-9a-f]+$/i.test(res)).toBe(true);
+  });
+});
+
+describe('stringToUnicodeEntities', () => {
+  it('should convert a string to Unicode entities', () => {
+    const input = 'Hello, World!';
+    const expected = '&#x48;&#x65;&#x6c;&#x6c;&#x6f;&#x2c;&#x20;&#x57;&#x6f;&#x72;&#x6c;&#x64;&#x21;';
+    const result = Util.stringToUnicodeEntities(input);
+    expect(result).toEqual(expected);
+  });
+  it('should handle an empty string', () => {
+    const input = '';
+    const expected = '';
+    const result = Util.stringToUnicodeEntities(input);
+    expect(result).toEqual(expected);
+  });
+  it('should handle special characters', () => {
+    const input = '@#^&*()';
+    const expected = '&#x40;&#x23;&#x5e;&#x26;&#x2a;&#x28;&#x29;';
+    const result = Util.stringToUnicodeEntities(input);
+    expect(result).toEqual(expected);
+  });
+  it('should handle non-English characters', () => {
+    const input = 'こんにちは';
+    const expected = '&#x3053;&#x3093;&#x306b;&#x3061;&#x306f;';
+    const result = Util.stringToUnicodeEntities(input);
+    expect(result).toEqual(expected);
+  });
+});
+
+describe('countLines', () => {
+  it('counts total number of lines correctly', () => {
+    const text = `This
+
+is
+a
+sample
+
+text
+with
+multiple
+lines`;
+
+    const result = Util.countLines(text);
+    expect(result).toEqual(10); // Including empty lines
+  });
+  it('handles edge case with empty string', () => {
+    const text = '';
+
+    const result = Util.countLines(text);
+    expect(result).toEqual(1); // Empty string should have 1 line
+  });
+  it('handles edge case with single line', () => {
+    const text = 'Single line text';
+
+    const result = Util.countLines(text);
+    expect(result).toEqual(1); // Single line should have 1 line
+  });
+  it('handles multiple types of line breaks', () => {
+    const text = `Line 1\r\nLine 2\rLine 3\nLine 4`;
+
+    const result = Util.countLines(text);
+    expect(result).toEqual(4); // Different line break types should be counted correctly
+  });
+});
+
+describe('isPathRelativeTo', () => {
+  it('should return true for a child path directly inside the parent path', () => {
+    const parentPath = '/home/user/projects';
+    const childPath = '/home/user/projects/subproject';
+    expect(Util.isPathRelativeTo(parentPath, childPath)).toBe(true);
+  });
+  it('should return true for a deeply nested child path inside the parent path', () => {
+    const parentPath = '/home/user';
+    const childPath = '/home/user/projects/subproject/module';
+    expect(Util.isPathRelativeTo(parentPath, childPath)).toBe(true);
+  });
+  it('should return false for a child path outside the parent path', () => {
+    const parentPath = '/home/user/projects';
+    const childPath = '/home/user/otherprojects/subproject';
+    expect(Util.isPathRelativeTo(parentPath, childPath)).toBe(false);
+  });
+  it('should return true for a child path specified with relative segments', () => {
+    const parentPath = '/home/user/projects';
+    const childPath = '/home/user/projects/../projects/subproject';
+    expect(Util.isPathRelativeTo(parentPath, childPath)).toBe(true);
+  });
+  it('should return false when the child path is actually a parent path', () => {
+    const parentPath = '/home/user/projects/subproject';
+    const childPath = '/home/user/projects';
+    expect(Util.isPathRelativeTo(parentPath, childPath)).toBe(false);
+  });
+});
+
 // See: https://github.com/actions/toolkit/blob/a1b068ec31a042ff1e10a522d8fdf0b8869d53ca/packages/core/src/core.ts#L89
 function getInputName(name: string): string {
  return `INPUT_${name.replace(/ /g, '_').toUpperCase()}`;
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -15,13 +15,18 @@
 # limitations under the License.

 ARG NODE_VERSION=20
-ARG DOCKER_VERSION=24.0.5
-ARG BUILDX_VERSION=0.11.2
+ARG DOCKER_VERSION=26.0.2
+ARG BUILDX_VERSION=0.16.2

 FROM node:${NODE_VERSION}-alpine AS base
 RUN apk add --no-cache cpio findutils git
-RUN yarn config set --home enableTelemetry 0
 WORKDIR /src
+RUN --mount=type=bind,target=.,rw \
+  --mount=type=cache,target=/src/.yarn/cache <<EOT
+  corepack enable
+  yarn --version
+  yarn config set --home enableTelemetry 0
+EOT

 FROM base AS deps
 RUN --mount=type=bind,target=.,rw \
--- a/jest.config.itg.ts
+++ b/jest.config.itg.ts
@@ -14,8 +14,21 @@
 * limitations under the License.
 */

+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+
+const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'docker-actions-toolkit-'));
+
+process.env = Object.assign({}, process.env, {
+  TEMP: tmpDir,
+  RUNNER_TEMP: path.join(tmpDir, 'runner-temp'),
+  RUNNER_TOOL_CACHE: path.join(tmpDir, 'runner-tool-cache')
+}) as {
+  [key: string]: string;
+};
+
 module.exports = {
-  clearMocks: true,
  testEnvironment: 'node',
  moduleFileExtensions: ['js', 'ts'],
  setupFiles: ['dotenv/config'],
@@ -27,5 +40,6 @@ module.exports = {
  moduleNameMapper: {
    '^csv-parse/sync': '<rootDir>/node_modules/csv-parse/dist/cjs/sync.cjs'
  },
+  testResultsProcessor: './__tests__/testResultsProcessor.ts',
  verbose: false
 };
--- a/jest.config.ts
+++ b/jest.config.ts
@@ -23,6 +23,9 @@ const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'docker-actions-toolkit-'))
 process.env = Object.assign({}, process.env, {
  TEMP: tmpDir,
  GITHUB_REPOSITORY: 'docker/actions-toolkit',
+  GITHUB_RUN_ATTEMPT: 2,
+  GITHUB_RUN_ID: 2188748038,
+  GITHUB_RUN_NUMBER: 15,
  RUNNER_TEMP: path.join(tmpDir, 'runner-temp'),
  RUNNER_TOOL_CACHE: path.join(tmpDir, 'runner-tool-cache')
 }) as {
@@ -43,5 +46,6 @@ module.exports = {
  },
  collectCoverageFrom: ['src/**/{!(index.ts),}.ts'],
  coveragePathIgnorePatterns: ['lib/', 'node_modules/', '__mocks__/', '__tests__/'],
+  testResultsProcessor: './__tests__/testResultsProcessor.ts',
  verbose: true
 };
--- a/package.json
+++ b/package.json
@@ -45,41 +45,50 @@
    "registry": "https://registry.npmjs.org/"
  },
  "dependencies": {
-    "@actions/cache": "^3.2.2",
+    "@actions/artifact": "^2.1.8",
+    "@actions/cache": "^3.2.4",
    "@actions/core": "^1.10.1",
    "@actions/exec": "^1.1.1",
    "@actions/github": "^6.0.0",
-    "@actions/http-client": "^2.2.0",
+    "@actions/http-client": "^2.2.1",
    "@actions/io": "^1.1.3",
    "@actions/tool-cache": "^2.0.1",
-    "@octokit/core": "^5.0.2",
-    "@octokit/plugin-rest-endpoint-methods": "^10.2.0",
+    "@azure/storage-blob": "^12.15.0",
+    "@octokit/core": "^5.1.0",
+    "@octokit/plugin-rest-endpoint-methods": "^10.4.0",
    "async-retry": "^1.3.3",
-    "csv-parse": "^5.5.2",
+    "csv-parse": "^5.5.6",
+    "gunzip-maybe": "^1.4.2",
    "handlebars": "^4.7.8",
+    "he": "^1.2.0",
+    "js-yaml": "^4.1.0",
    "jwt-decode": "^4.0.0",
-    "semver": "^7.5.4",
-    "tmp": "^0.2.1"
+    "semver": "^7.6.3",
+    "tar-stream": "^3.1.7",
+    "tmp": "^0.2.3"
  },
  "devDependencies": {
    "@types/csv-parse": "^1.2.2",
-    "@types/js-yaml": "^4.0.5",
-    "@types/node": "^20.5.9",
-    "@types/semver": "^7.5.1",
-    "@types/tmp": "^0.2.3",
-    "@typescript-eslint/eslint-plugin": "^6.6.0",
-    "@typescript-eslint/parser": "^6.6.0",
-    "dotenv": "^16.3.1",
-    "eslint": "^8.48.0",
-    "eslint-config-prettier": "^9.0.0",
-    "eslint-plugin-import": "^2.28.1",
-    "eslint-plugin-jest": "^27.2.3",
-    "eslint-plugin-prettier": "^5.0.0",
-    "jest": "^29.6.4",
-    "prettier": "^3.0.3",
-    "rimraf": "^5.0.1",
-    "ts-jest": "^29.1.1",
-    "ts-node": "^10.9.1",
-    "typescript": "^5.2.2"
+    "@types/gunzip-maybe": "^1.4.2",
+    "@types/he": "^1.2.3",
+    "@types/js-yaml": "^4.0.9",
+    "@types/node": "^20.12.10",
+    "@types/semver": "^7.5.8",
+    "@types/tar-stream": "^3.1.3",
+    "@types/tmp": "^0.2.6",
+    "@typescript-eslint/eslint-plugin": "^7.8.0",
+    "@typescript-eslint/parser": "^7.8.0",
+    "dotenv": "^16.4.5",
+    "eslint": "^8.57.0",
+    "eslint-config-prettier": "^9.1.0",
+    "eslint-plugin-import": "^2.29.1",
+    "eslint-plugin-jest": "^28.5.0",
+    "eslint-plugin-prettier": "^5.1.3",
+    "jest": "^29.7.0",
+    "prettier": "^3.2.5",
+    "rimraf": "^5.0.5",
+    "ts-jest": "^29.1.2",
+    "ts-node": "^10.9.2",
+    "typescript": "^5.4.5"
  }
 }
--- a/src/buildkit/buildkit.ts
+++ b/src/buildkit/buildkit.ts
@@ -19,10 +19,10 @@ import * as semver from 'semver';

 import {Buildx} from '../buildx/buildx';
 import {Builder} from '../buildx/builder';
+import {Docker} from '../docker/docker';
 import {Config} from './config';
-import {Exec} from '../exec';

-import {BuilderInfo, NodeInfo} from '../types/builder';
+import {BuilderInfo, NodeInfo} from '../types/buildx/builder';

 export interface BuildKitOpts {
  buildx?: Buildx;
@@ -51,13 +51,13 @@ export class BuildKit {

  private async getVersionWithinImage(nodeName: string): Promise<string> {
    core.debug(`BuildKit.getVersionWithinImage nodeName: ${nodeName}`);
-    return Exec.getExecOutput(`docker`, ['inspect', '--format', '{{.Config.Image}}', `${Buildx.containerNamePrefix}${nodeName}`], {
+    return Docker.getExecOutput(['inspect', '--format', '{{.Config.Image}}', `${Buildx.containerNamePrefix}${nodeName}`], {
      ignoreReturnCode: true,
      silent: true
    }).then(bkitimage => {
      if (bkitimage.exitCode == 0 && bkitimage.stdout.length > 0) {
        core.debug(`BuildKit.getVersionWithinImage image: ${bkitimage.stdout.trim()}`);
-        return Exec.getExecOutput(`docker`, ['run', '--rm', bkitimage.stdout.trim(), '--version'], {
+        return Docker.getExecOutput(['run', '--rm', bkitimage.stdout.trim(), '--version'], {
          ignoreReturnCode: true,
          silent: true
        }).then(bkitversion => {
--- a/src/buildkit/git.ts
+++ b/src/buildkit/git.ts
@@ -0,0 +1,113 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {GitRef, GitURL, GitURLFragment, URLUserInfo} from '../types/buildkit/git';
+
+export class Git {
+  private static protoRegexp = new RegExp('^[a-zA-Z0-9]+://');
+  private static supportedProtos = {
+    http: {},
+    https: {},
+    ssh: {},
+    git: {}
+  };
+
+  // https://github.com/moby/buildkit/blob/2ec1338fc13f73b43f0b1b4f4678d7cd654bc86c/util/gitutil/git_url.go#L79
+  public static parseURL(remote: string): GitURL {
+    const match = remote.match(Git.protoRegexp);
+    if (match && match.length > 0) {
+      let proto = match[0].toLowerCase();
+      proto = proto.slice(0, proto.lastIndexOf('://'));
+      if (!(proto in Git.supportedProtos)) {
+        throw new Error(`Invalid protocol: ${proto}`);
+      }
+      return Git.fromURL(new URL(remote));
+    }
+
+    throw new Error('Unknown protocol');
+  }
+
+  // https://github.com/moby/buildkit/blob/2ec1338fc13f73b43f0b1b4f4678d7cd654bc86c/util/gitutil/git_url.go#L108
+  private static fromURL(url: URL): GitURL {
+    const withoutFragment = new URL(url.toString());
+    withoutFragment.hash = '';
+
+    let user: URLUserInfo | undefined;
+    if (url.username || url.password) {
+      user = {
+        username: url.username,
+        password: url.password,
+        passwordSet: url.password !== ''
+      };
+    }
+
+    // TODO: handle SCP-style URLs
+
+    return {
+      scheme: url.protocol.slice(0, -1),
+      user: user,
+      host: `${url.hostname}${url.port ? ':' + url.port : ''}`,
+      path: url.pathname,
+      fragment: Git.splitGitFragment(url.hash),
+      remote: withoutFragment.toString()
+    };
+  }
+
+  // https://github.com/moby/buildkit/blob/2ec1338fc13f73b43f0b1b4f4678d7cd654bc86c/util/gitutil/git_url.go#L69
+  private static splitGitFragment(fragment: string): GitURLFragment | undefined {
+    if (fragment === '') {
+      return undefined;
+    }
+    const [ref, subdir] = fragment.slice(1).split(':');
+    return {
+      ref: ref,
+      subdir: subdir
+    };
+  }
+
+  // https://github.com/moby/buildkit/blob/2ec1338fc13f73b43f0b1b4f4678d7cd654bc86c/util/gitutil/git_ref.go#L52
+  public static parseRef(ref: string): GitRef | undefined {
+    const res: GitRef = {};
+    let remote: GitURL;
+    if (ref.startsWith('./') || ref.startsWith('../')) {
+      throw new Error('Invalid argument');
+    } else if (ref.startsWith('github.com/')) {
+      res.indistinguishableFromLocal = true; // Deprecated
+      remote = Git.fromURL(new URL('https://' + ref));
+    } else {
+      remote = Git.parseURL(ref);
+      if (['http', 'git'].includes(remote.scheme)) {
+        res.unencryptedTCP = true; // Discouraged, but not deprecated
+      }
+      if (['http', 'https'].includes(remote.scheme) && !remote.path.endsWith('.git')) {
+        throw new Error('Invalid argument');
+      }
+    }
+    res.remote = remote.remote;
+
+    if (res.indistinguishableFromLocal) {
+      res.remote = res.remote.split('://')[1];
+    }
+    if (remote.fragment) {
+      res.commit = remote.fragment.ref;
+      res.subDir = remote.fragment.subdir;
+    }
+
+    const repoSplitBySlash = res.remote.split('/');
+    res.shortName = repoSplitBySlash[repoSplitBySlash.length - 1].replace('.git', '');
+    return res;
+  }
+}
--- a/src/buildx/bake.ts
+++ b/src/buildx/bake.ts
@@ -14,31 +14,96 @@
 * limitations under the License.
 */

+import fs from 'fs';
+import path from 'path';
+
+import {Build} from './build';
 import {Buildx} from './buildx';
+import {Context} from '../context';
 import {Exec} from '../exec';
-import {Inputs} from './inputs';
 import {Util} from '../util';

-import {BakeDefinition} from '../types/bake';
+import {ExecOptions} from '@actions/exec';
+import {BakeDefinition} from '../types/buildx/bake';
+import {BuildMetadata} from '../types/buildx/build';

 export interface BakeOpts {
  buildx?: Buildx;
 }

+export interface BakeCmdOpts {
+  files?: Array<string>;
+  load?: boolean;
+  noCache?: boolean;
+  overrides?: Array<string>;
+  provenance?: string;
+  push?: boolean;
+  sbom?: string;
+  source?: string;
+  targets?: Array<string>;
+
+  githubToken?: string; // for auth with remote definitions on private repos
+}
+
 export class Bake {
  private readonly buildx: Buildx;
+  private readonly metadataFilename: string;

  constructor(opts?: BakeOpts) {
    this.buildx = opts?.buildx || new Buildx();
+    this.metadataFilename = `bake-metadata-${Util.generateRandomString()}.json`;
  }

-  public async parseDefinitions(sources: Array<string>, targets?: Array<string>, overrides?: Array<string>, load?: boolean, push?: boolean, workdir?: string): Promise<BakeDefinition> {
+  public getMetadataFilePath(): string {
+    return path.join(Context.tmpDir(), this.metadataFilename);
+  }
+
+  public resolveMetadata(): BuildMetadata | undefined {
+    const metadataFile = this.getMetadataFilePath();
+    if (!fs.existsSync(metadataFile)) {
+      return undefined;
+    }
+    const content = fs.readFileSync(metadataFile, {encoding: 'utf-8'}).trim();
+    if (content === 'null') {
+      return undefined;
+    }
+    return <BuildMetadata>JSON.parse(content);
+  }
+
+  public resolveRefs(metadata?: BuildMetadata): Array<string> | undefined {
+    if (!metadata) {
+      metadata = this.resolveMetadata();
+      if (!metadata) {
+        return undefined;
+      }
+    }
+    const refs = new Array<string>();
+    for (const key in metadata) {
+      if ('buildx.build.ref' in metadata[key]) {
+        refs.push(metadata[key]['buildx.build.ref']);
+      }
+    }
+    return refs.length > 0 ? refs : undefined;
+  }
+
+  public async getDefinition(cmdOpts: BakeCmdOpts, execOptions?: ExecOptions): Promise<BakeDefinition> {
+    execOptions = execOptions || {ignoreReturnCode: true};
+    execOptions.ignoreReturnCode = true;
+    if (cmdOpts.githubToken) {
+      execOptions.env = Object.assign({}, process.env, {
+        BUILDX_BAKE_GIT_AUTH_TOKEN: cmdOpts.githubToken
+      }) as {
+        [key: string]: string;
+      };
+    }
+
    const args = ['bake'];

-    let remoteDef;
+    let remoteDef: string | undefined;
    const files: Array<string> = [];
+    const sources = [...(cmdOpts.files || []), cmdOpts.source];
    if (sources) {
-      for (const source of sources.map(v => v.trim())) {
+      for (const source of sources.map(v => (v ? v.trim() : ''))) {
        if (source.length == 0) {
          continue;
        }
@@ -47,7 +112,7 @@ export class Bake {
          continue;
        }
        if (remoteDef) {
-          throw new Error(`Only one remote bake definition is allowed`);
+          throw new Error(`Only one remote bake definition can be defined`);
        }
        remoteDef = source;
      }
@@ -58,41 +123,50 @@ export class Bake {
    for (const file of files) {
      args.push('--file', file);
    }
-    if (overrides) {
-      for (const override of overrides) {
+    if (cmdOpts.overrides) {
+      for (const override of cmdOpts.overrides) {
        args.push('--set', override);
      }
    }
-    if (load) {
+    if (cmdOpts.load) {
      args.push('--load');
    }
-    if (push) {
+    if (cmdOpts.noCache) {
+      args.push('--no-cache');
+    }
+    if (cmdOpts.provenance) {
+      args.push('--provenance', cmdOpts.provenance);
+    }
+    if (cmdOpts.push) {
      args.push('--push');
    }
+    if (cmdOpts.sbom) {
+      args.push('--sbom', cmdOpts.sbom);
+    }

-    const printCmd = await this.buildx.getCommand([...args, '--print', ...(targets || [])]);
-    return await Exec.getExecOutput(printCmd.command, printCmd.args, {
-      cwd: workdir,
-      ignoreReturnCode: true,
-      silent: true
-    }).then(res => {
+    const printCmd = await this.buildx.getCommand([...args, '--print', ...(cmdOpts.targets || [])]);
+    return await Exec.getExecOutput(printCmd.command, printCmd.args, execOptions).then(res => {
      if (res.stderr.length > 0 && res.exitCode != 0) {
-        throw new Error(res.stderr);
+        throw new Error(`cannot parse bake definitions: ${res.stderr.match(/(.*)\s*$/)?.[0]?.trim() ?? 'unknown error'}`);
      }
-      return <BakeDefinition>JSON.parse(res.stdout.trim());
+      return Bake.parseDefinition(res.stdout.trim());
    });
  }

+  public static parseDefinition(dt: string): BakeDefinition {
+    return <BakeDefinition>JSON.parse(dt);
+  }
+
  public static hasLocalExporter(def: BakeDefinition): boolean {
-    return Inputs.hasExporterType('local', Bake.exporters(def));
+    return Build.hasExporterType('local', Bake.exporters(def));
  }

  public static hasTarExporter(def: BakeDefinition): boolean {
-    return Inputs.hasExporterType('tar', Bake.exporters(def));
+    return Build.hasExporterType('tar', Bake.exporters(def));
  }

  public static hasDockerExporter(def: BakeDefinition, load?: boolean): boolean {
-    return load || Inputs.hasExporterType('docker', Bake.exporters(def));
+    return load || Build.hasExporterType('docker', Bake.exporters(def));
  }

  private static exporters(def: BakeDefinition): Array<string> {
--- a/src/buildx/build.ts
+++ b/src/buildx/build.ts
@@ -0,0 +1,322 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'fs';
+import path from 'path';
+import * as core from '@actions/core';
+import {parse} from 'csv-parse/sync';
+
+import {Buildx} from './buildx';
+import {Context} from '../context';
+import {GitHub} from '../github';
+import {Util} from '../util';
+
+import {BuildMetadata} from '../types/buildx/build';
+import {VertexWarning} from '../types/buildkit/client';
+import {ProvenancePredicate} from '../types/intoto/slsa_provenance/v0.2/provenance';
+
+export interface BuildOpts {
+  buildx?: Buildx;
+}
+
+export class Build {
+  private readonly buildx: Buildx;
+  private readonly iidFilename: string;
+  private readonly metadataFilename: string;
+
+  constructor(opts?: BuildOpts) {
+    this.buildx = opts?.buildx || new Buildx();
+    this.iidFilename = `build-iidfile-${Util.generateRandomString()}.txt`;
+    this.metadataFilename = `build-metadata-${Util.generateRandomString()}.json`;
+  }
+
+  public getImageIDFilePath(): string {
+    return path.join(Context.tmpDir(), this.iidFilename);
+  }
+
+  public resolveImageID(): string | undefined {
+    const iidFile = this.getImageIDFilePath();
+    if (!fs.existsSync(iidFile)) {
+      return undefined;
+    }
+    return fs.readFileSync(iidFile, {encoding: 'utf-8'}).trim();
+  }
+
+  public getMetadataFilePath(): string {
+    return path.join(Context.tmpDir(), this.metadataFilename);
+  }
+
+  public resolveMetadata(): BuildMetadata | undefined {
+    const metadataFile = this.getMetadataFilePath();
+    if (!fs.existsSync(metadataFile)) {
+      return undefined;
+    }
+    const content = fs.readFileSync(metadataFile, {encoding: 'utf-8'}).trim();
+    if (content === 'null') {
+      return undefined;
+    }
+    return <BuildMetadata>JSON.parse(content);
+  }
+
+  public resolveRef(metadata?: BuildMetadata): string | undefined {
+    if (!metadata) {
+      metadata = this.resolveMetadata();
+      if (!metadata) {
+        return undefined;
+      }
+    }
+    if ('buildx.build.ref' in metadata) {
+      return metadata['buildx.build.ref'];
+    }
+    return undefined;
+  }
+
+  public resolveProvenance(metadata?: BuildMetadata): ProvenancePredicate | undefined {
+    if (!metadata) {
+      metadata = this.resolveMetadata();
+      if (!metadata) {
+        return undefined;
+      }
+    }
+    if ('buildx.build.provenance' in metadata) {
+      return metadata['buildx.build.provenance'] as ProvenancePredicate;
+    }
+    return undefined;
+  }
+
+  public resolveWarnings(metadata?: BuildMetadata): Array<VertexWarning> | undefined {
+    if (!metadata) {
+      metadata = this.resolveMetadata();
+      if (!metadata) {
+        return undefined;
+      }
+    }
+    if ('buildx.build.warnings' in metadata) {
+      return metadata['buildx.build.warnings'] as Array<VertexWarning>;
+    }
+    return undefined;
+  }
+
+  public resolveDigest(metadata?: BuildMetadata): string | undefined {
+    if (!metadata) {
+      metadata = this.resolveMetadata();
+      if (!metadata) {
+        return undefined;
+      }
+    }
+    if ('containerimage.digest' in metadata) {
+      return metadata['containerimage.digest'];
+    }
+    return undefined;
+  }
+
+  public static resolveSecretString(kvp: string): string {
+    const [key, file] = Build.resolveSecret(kvp, false);
+    return `id=${key},src=${file}`;
+  }
+
+  public static resolveSecretFile(kvp: string): string {
+    const [key, file] = Build.resolveSecret(kvp, true);
+    return `id=${key},src=${file}`;
+  }
+
+  public static resolveSecretEnv(kvp: string): string {
+    const [key, value] = Build.parseSecretKvp(kvp);
+    return `id=${key},env=${value}`;
+  }
+
+  public static resolveSecret(kvp: string, file: boolean): [string, string] {
+    const [key, _value] = Build.parseSecretKvp(kvp);
+    let value = _value;
+    if (file) {
+      if (!fs.existsSync(value)) {
+        throw new Error(`secret file ${value} not found`);
+      }
+      value = fs.readFileSync(value, {encoding: 'utf-8'});
+    }
+    const secretFile = Context.tmpName({tmpdir: Context.tmpDir()});
+    fs.writeFileSync(secretFile, value);
+    return [key, secretFile];
+  }
+
+  public static getProvenanceInput(name: string): string {
+    const input = core.getInput(name);
+    if (!input) {
+      // if input is not set returns empty string
+      return input;
+    }
+    try {
+      return core.getBooleanInput(name) ? `builder-id=${GitHub.workflowRunURL(true)}` : 'false';
+    } catch (err) {
+      // not a valid boolean, so we assume it's a string
+      return Build.resolveProvenanceAttrs(input);
+    }
+  }
+
+  public static resolveProvenanceAttrs(input: string): string {
+    if (!input) {
+      return `builder-id=${GitHub.workflowRunURL(true)}`;
+    }
+    // parse attributes from input
+    const fields = parse(input, {
+      relaxColumnCount: true,
+      skipEmptyLines: true
+    })[0];
+    // check if builder-id attribute exists in the input
+    for (const field of fields) {
+      const parts = field
+        .toString()
+        .split(/(?<=^[^=]+?)=/)
+        .map(item => item.trim());
+      if (parts[0] == 'builder-id') {
+        return input;
+      }
+    }
+    // if not add builder-id attribute
+    return `${input},builder-id=${GitHub.workflowRunURL(true)}`;
+  }
+
+  public static resolveCacheToAttrs(input: string, githubToken?: string): string {
+    if (!input) {
+      return input;
+    }
+
+    let cacheType = 'registry';
+    let ghaCacheRepository = '';
+    let ghaCacheGHToken = '';
+
+    const fields = parse(input, {
+      relaxColumnCount: true,
+      skipEmptyLines: true
+    })[0];
+    for (const field of fields) {
+      const parts = field
+        .toString()
+        .split(/(?<=^[^=]+?)=/)
+        .map(item => item.trim());
+      if (parts[0] === 'type') {
+        cacheType = parts[1];
+      } else if (parts[0] === 'repository') {
+        ghaCacheRepository = parts[1];
+      } else if (parts[0] === 'ghtoken') {
+        ghaCacheGHToken = parts[1];
+      }
+    }
+
+    if (cacheType === 'gha') {
+      if (!ghaCacheRepository) {
+        input = `${input},repository=${GitHub.repository}`;
+      }
+      if (!ghaCacheGHToken && githubToken) {
+        input = `${input},ghtoken=${githubToken}`;
+      }
+    }
+
+    return input;
+  }
+
+  public static hasLocalExporter(exporters: string[]): boolean {
+    return Build.hasExporterType('local', exporters);
+  }
+
+  public static hasTarExporter(exporters: string[]): boolean {
+    return Build.hasExporterType('tar', exporters);
+  }
+
+  public static hasDockerExporter(exporters: string[], load?: boolean): boolean {
+    return load || Build.hasExporterType('docker', exporters);
+  }
+
+  public static hasExporterType(name: string, exporters: string[]): boolean {
+    const records = parse(exporters.join(`\n`), {
+      delimiter: ',',
+      trim: true,
+      columns: false,
+      relaxColumnCount: true
+    });
+    for (const record of records) {
+      if (record.length == 1 && !record[0].startsWith('type=')) {
+        // Local if no type is defined
+        // https://github.com/docker/buildx/blob/d2bf42f8b4784d83fde17acb3ed84703ddc2156b/build/output.go#L29-L43
+        return name == 'local';
+      }
+      for (const [key, value] of record.map(chunk => chunk.split('=').map(item => item.trim()))) {
+        if (key == 'type' && value == name) {
+          return true;
+        }
+      }
+    }
+    return false;
+  }
+
+  public static hasAttestationType(name: string, attrs: string): boolean {
+    const records = parse(attrs, {
+      delimiter: ',',
+      trim: true,
+      columns: false,
+      relaxColumnCount: true
+    });
+    for (const record of records) {
+      for (const [key, value] of record.map((chunk: string) => chunk.split('=').map(item => item.trim()))) {
+        if (key == 'type' && value == name) {
+          return true;
+        }
+      }
+    }
+    return false;
+  }
+
+  public static resolveAttestationAttrs(attrs: string): string {
+    const records = parse(attrs, {
+      delimiter: ',',
+      trim: true,
+      columns: false,
+      relaxColumnCount: true
+    });
+    const res: Array<string> = [];
+    for (const record of records) {
+      for (const attr of record) {
+        try {
+          // https://github.com/docker/buildx/blob/8abef5908705e49f7ba88ef8c957e1127b597a2a/util/buildflags/attests.go#L13-L21
+          const v = Util.parseBool(attr);
+          res.push(`disabled=${!v}`);
+        } catch (err) {
+          res.push(attr);
+        }
+      }
+    }
+    return res.join(',');
+  }
+
+  public static hasGitAuthTokenSecret(secrets: string[]): boolean {
+    for (const secret of secrets) {
+      if (secret.startsWith('GIT_AUTH_TOKEN=')) {
+        return true;
+      }
+    }
+    return false;
+  }
+
+  private static parseSecretKvp(kvp: string): [string, string] {
+    const delimiterIndex = kvp.indexOf('=');
+    const key = kvp.substring(0, delimiterIndex);
+    const value = kvp.substring(delimiterIndex + 1);
+    if (key.length == 0 || value.length == 0) {
+      throw new Error(`${kvp} is not a valid secret`);
+    }
+    return [key, value];
+  }
+}
--- a/src/buildx/builder.ts
+++ b/src/buildx/builder.ts
@@ -19,7 +19,7 @@ import * as core from '@actions/core';
 import {Buildx} from './buildx';
 import {Exec} from '../exec';

-import {BuilderInfo, GCPolicy, NodeInfo} from '../types/builder';
+import {BuilderInfo, GCPolicy, NodeInfo} from '../types/buildx/builder';

 export interface BuilderOpts {
  buildx?: Buildx;
@@ -55,11 +55,25 @@ export class Builder {
    return ok;
  }

-  public async inspect(name: string): Promise<BuilderInfo> {
-    const cmd = await this.buildx.getCommand(['inspect', name]);
+  public async inspect(name?: string): Promise<BuilderInfo> {
+    // always enable debug for inspect command, so we can display additional
+    // fields such as features: https://github.com/docker/buildx/pull/1854
+    const envs = Object.assign({}, process.env, {
+      DEBUG: '1'
+    }) as {
+      [key: string]: string;
+    };
+
+    const args = ['inspect'];
+    if (name) {
+      args.push(name);
+    }
+
+    const cmd = await this.buildx.getCommand(args);
    return await Exec.getExecOutput(cmd.command, cmd.args, {
      ignoreReturnCode: true,
-      silent: true
+      silent: true,
+      env: envs
    }).then(res => {
      if (res.stderr.length > 0 && res.exitCode != 0) {
        throw new Error(res.stderr.trim());
@@ -83,7 +97,7 @@ export class Builder {
        continue;
      }
      switch (true) {
-        case lkey == 'name': {
+        case lkey == 'name':
          parsingType = undefined;
          if (builder.name == undefined) {
            builder.name = value;
@@ -98,42 +112,36 @@ export class Builder {
            currentNode = {name: value};
          }
          break;
-        }
-        case lkey == 'driver': {
+        case lkey == 'driver':
          parsingType = undefined;
          builder.driver = value;
          break;
-        }
-        case lkey == 'last activity': {
+        case lkey == 'last activity':
          parsingType = undefined;
          builder.lastActivity = new Date(value);
          break;
-        }
-        case lkey == 'endpoint': {
+        case lkey == 'endpoint':
          parsingType = undefined;
          currentNode.endpoint = value;
          break;
-        }
-        case lkey == 'driver options': {
+        case lkey == 'driver options':
          parsingType = undefined;
          currentNode['driver-opts'] = (value.match(/([a-zA-Z0-9_.]+)="([^"]*)"/g) || []).map(v => v.replace(/^(.*)="(.*)"$/g, '$1=$2'));
          break;
-        }
-        case lkey == 'status': {
+        case lkey == 'status':
          parsingType = undefined;
          currentNode.status = value;
          break;
-        }
-        case lkey == 'flags': {
+        case lkey == 'buildkit daemon flags':
+        case lkey == 'flags': // buildx < v0.13
          parsingType = undefined;
          currentNode['buildkitd-flags'] = value;
          break;
-        }
-        case lkey == 'buildkit': {
+        case lkey == 'buildkit version':
+        case lkey == 'buildkit': // buildx < v0.13
          parsingType = undefined;
          currentNode.buildkit = value;
          break;
-        }
        case lkey == 'platforms': {
          parsingType = undefined;
          if (!value) {
@@ -155,21 +163,28 @@ export class Builder {
          currentNode.platforms = platforms.join(',');
          break;
        }
-        case lkey == 'labels': {
+        case lkey == 'features':
+          parsingType = 'features';
+          currentNode.features = {};
+          break;
+        case lkey == 'labels':
          parsingType = 'label';
          currentNode.labels = {};
          break;
-        }
-        case lkey.startsWith('gc policy rule#'): {
+        case lkey.startsWith('gc policy rule#'):
          parsingType = 'gcpolicy';
          if (currentNode.gcPolicy && currentGCPolicy) {
            currentNode.gcPolicy.push(currentGCPolicy);
            currentGCPolicy = undefined;
          }
          break;
-        }
        default: {
          switch (parsingType || '') {
+            case 'features': {
+              currentNode.features = currentNode.features || {};
+              currentNode.features[key.trim()] = Boolean(value);
+              break;
+            }
            case 'label': {
              currentNode.labels = currentNode.labels || {};
              currentNode.labels[key.trim()] = value;
--- a/src/buildx/buildx.ts
+++ b/src/buildx/buildx.ts
@@ -19,10 +19,16 @@ import path from 'path';
 import * as core from '@actions/core';
 import * as semver from 'semver';

+import {Git} from '../buildkit/git';
 import {Docker} from '../docker/docker';
+import {GitHub} from '../github';
 import {Exec} from '../exec';
+import {Util} from '../util';

-import {Cert} from '../types/buildx';
+import {VertexWarning} from '../types/buildkit/client';
+import {GitURL} from '../types/buildkit/git';
+import {Cert, LocalRefsOpts, LocalRefsResponse, LocalState} from '../types/buildx/buildx';
+import {GitHubAnnotation} from '../types/github';

 export interface BuildxOpts {
  standalone?: boolean;
@@ -45,6 +51,14 @@ export class Buildx {
    return process.env.BUILDX_CONFIG || path.join(Docker.configDir, 'buildx');
  }

+  static get refsDir(): string {
+    return path.join(Buildx.configDir, 'refs');
+  }
+
+  static get refsGroupDir(): string {
+    return path.join(Buildx.refsDir, '__group__');
+  }
+
  static get certsDir(): string {
    return path.join(Buildx.configDir, 'certs');
  }
@@ -86,13 +100,6 @@ export class Buildx {
    return ok;
  }

-  public async printInspect(name: string): Promise<void> {
-    const cmd = await this.getCommand(['inspect', name]);
-    await Exec.exec(cmd.command, cmd.args, {
-      failOnStdErr: false
-    });
-  }
-
  public async version(): Promise<string> {
    if (this._versionOnce) {
      return this._version;
@@ -175,4 +182,241 @@ export class Buildx {
    }
    return driverOpts;
  }
+
+  public static localState(ref: string, dir?: string): LocalState {
+    const [builderName, nodeName, id] = ref.split('/');
+    if (!builderName || !nodeName || !id) {
+      throw new Error(`Invalid build reference: ${ref}`);
+    }
+    const lsPath = path.join(dir || Buildx.refsDir, builderName, nodeName, id);
+    if (!fs.existsSync(lsPath)) {
+      throw new Error(`Local state not found in ${lsPath}`);
+    }
+    return Buildx.fixLocalState(<LocalState>JSON.parse(fs.readFileSync(lsPath, 'utf8')));
+  }
+
+  // https://github.com/docker/buildx/pull/2560
+  private static fixLocalState(ls: LocalState): LocalState {
+    const fnTrimToValidContext = function (inp: string): [string, string, boolean] {
+      const match = inp.match(/(.*)(https?:\/{1,2}\S+|ssh:\/{1,2}\S+|git:\/{1,2}\S+)/i);
+      if (match && match.length == 3) {
+        const trimed = match[1];
+        let url = match[2];
+        if (url.startsWith('https:/') && !url.startsWith('https://')) {
+          url = url.replace('https:/', 'https://');
+        }
+        if (url.startsWith('http:/') && !url.startsWith('http://')) {
+          url = url.replace('http:/', 'http://');
+        }
+        if (url.startsWith('ssh:/') && !url.startsWith('ssh://')) {
+          url = url.replace('ssh:/', 'ssh://');
+        }
+        if (url.startsWith('git:/') && !url.startsWith('git://')) {
+          url = url.replace('git:/', 'git://');
+        }
+        return [url, trimed, true];
+      }
+      return [inp, '', false];
+    };
+
+    const [contextPath, trimedPath, isURL] = fnTrimToValidContext(ls.LocalPath);
+    if (isURL) {
+      ls.LocalPath = contextPath;
+      if (ls.DockerfilePath.indexOf(trimedPath) === 0) {
+        ls.DockerfilePath = ls.DockerfilePath.substring(trimedPath.length);
+      }
+    }
+    ls.LocalPath = ls.LocalPath.endsWith('/-') ? '-' : ls.LocalPath;
+    ls.DockerfilePath = ls.DockerfilePath.endsWith('/-') ? '-' : ls.DockerfilePath;
+    return ls;
+  }
+
+  public static refs(opts: LocalRefsOpts, refs: LocalRefsResponse = {}): LocalRefsResponse {
+    const {dir, builderName, nodeName, since} = opts;
+
+    let dirpath = path.resolve(dir);
+    if (opts.builderName) {
+      dirpath = path.join(dirpath, opts.builderName);
+    }
+    if (opts.nodeName) {
+      dirpath = path.join(dirpath, opts.nodeName);
+    }
+    if (!fs.existsSync(dirpath)) {
+      return refs;
+    }
+
+    const files = fs.readdirSync(dirpath);
+    for (const file of files) {
+      const filePath = path.join(dirpath, file);
+      const stat = fs.statSync(filePath);
+      if (stat.isDirectory()) {
+        const nopts: LocalRefsOpts = {...opts};
+        if (!builderName) {
+          if (file === '__group__') {
+            continue;
+          }
+          nopts.builderName = file;
+        } else if (!nodeName) {
+          nopts.nodeName = file;
+        }
+        Buildx.refs(nopts, refs);
+      } else {
+        if (since && stat.mtime < since) {
+          continue;
+        }
+        const localState = Buildx.fixLocalState(<LocalState>JSON.parse(fs.readFileSync(filePath, 'utf8')));
+        const ref = `${builderName}/${nodeName}/${file}`;
+        refs[ref] = localState;
+      }
+    }
+
+    return refs;
+  }
+
+  public static async convertWarningsToGitHubAnnotations(warnings: Array<VertexWarning>, buildRefs: Array<string>, refsDir?: string): Promise<Array<GitHubAnnotation> | undefined> {
+    if (warnings.length === 0) {
+      return;
+    }
+    const fnGitURL = function (inp: string): GitURL | undefined {
+      try {
+        return Git.parseURL(inp);
+      } catch (e) {
+        // noop
+      }
+    };
+    const fnLocalState = function (ref: string): LocalState | undefined {
+      try {
+        return Buildx.localState(ref, refsDir);
+      } catch (e) {
+        core.debug(`Buildx.convertWarningsToGitHubAnnotations(${ref}): local state not found: ${e.message}`);
+      }
+    };
+
+    interface Dockerfile {
+      path: string;
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      content?: any;
+      remote?: boolean;
+    }
+
+    const dockerfiles: Array<Dockerfile> = [];
+    for (const ref of buildRefs) {
+      const ls = fnLocalState(ref);
+      if (!ls) {
+        continue;
+      }
+
+      if (ls.DockerfilePath == '-') {
+        // exclude dockerfile from stdin
+        core.debug(`Buildx.convertWarningsToGitHubAnnotations(${ref}): skipping stdin Dockerfile`);
+        continue;
+      } else if (ls.DockerfilePath == '') {
+        ls.DockerfilePath = 'Dockerfile';
+      }
+
+      const gitURL = fnGitURL(ls.LocalPath);
+      if (gitURL) {
+        core.debug(`Buildx.convertWarningsToGitHubAnnotations(${ref}): git context detected: ${ls.LocalPath}`);
+        const remoteHost = gitURL.host.replace(/:.*/, '');
+        if (remoteHost !== 'github.com' && !remoteHost.endsWith('.ghe.com')) {
+          // we only support running actions on GitHub for now
+          // we might add support for GitLab in the future
+          core.debug(`Buildx.convertWarningsToGitHubAnnotations(${ref}): not a GitHub repo: ${remoteHost}`);
+          continue;
+        }
+        // if repository matches then we can link to the Dockerfile
+        const remoteRepo = gitURL.path.replace(/^\//, '').replace(/\.git$/, '');
+        if (remoteRepo !== GitHub.repository) {
+          core.debug(`Buildx.convertWarningsToGitHubAnnotations(${ref}): not same GitHub repo: ${remoteRepo} != ${GitHub.repository}`);
+          continue;
+        }
+        dockerfiles.push({
+          path: ls.DockerfilePath, // dockerfile path is always relative for a git context
+          remote: true
+        });
+        continue;
+      }
+
+      if (!fs.existsSync(ls.DockerfilePath)) {
+        core.debug(`Buildx.convertWarningsToGitHubAnnotations: Dockerfile not found from localstate ref ${ref}: ${ls.DockerfilePath}`);
+        continue;
+      }
+
+      const workspaceDir = GitHub.workspace;
+      // only treat dockerfile path relative to GitHub actions workspace dir
+      if (Util.isPathRelativeTo(workspaceDir, ls.DockerfilePath)) {
+        dockerfiles.push({
+          path: path.relative(workspaceDir, ls.DockerfilePath),
+          content: btoa(fs.readFileSync(ls.DockerfilePath, {encoding: 'utf-8'}))
+        });
+      } else {
+        core.debug(`Buildx.convertWarningsToGitHubAnnotations: skipping Dockerfile outside of workspace: ${ls.DockerfilePath}`);
+      }
+    }
+
+    if (dockerfiles.length === 0) {
+      core.debug(`Buildx.convertWarningsToGitHubAnnotations: no Dockerfiles found`);
+      return;
+    }
+    core.debug(`Buildx.convertWarningsToGitHubAnnotations: found ${dockerfiles.length} Dockerfiles: ${JSON.stringify(dockerfiles, null, 2)}`);
+
+    const annotations: Array<GitHubAnnotation> = [];
+    for (const warning of warnings) {
+      if (!warning.detail || !warning.short) {
+        core.debug(`Buildx.convertWarningsToGitHubAnnotations: skipping warning without detail or short`);
+        continue;
+      }
+
+      const warningSourceFilename = warning.sourceInfo?.filename;
+      const warningSourceData = warning.sourceInfo?.data;
+      if (!warningSourceFilename || !warningSourceData) {
+        core.debug(`Buildx.convertWarningsToGitHubAnnotations: skipping warning without source info filename or data`);
+        continue;
+      }
+
+      const title = warning.detail.map(encoded => atob(encoded)).join(' ');
+      let message = atob(warning.short).replace(/\s\(line \d+\)$/, '');
+      if (warning.url) {
+        // https://github.com/docker/buildx/blob/d8c9ebde1fdcf659f1fa3efa6ccc27a28b0f1564/commands/build.go#L854
+        message += `\nMore info: ${warning.url}`;
+      }
+
+      // GitHub's annotations don't clearly show ranges of lines, so we'll just
+      // show the first line: https://github.com/orgs/community/discussions/129899
+      const startLine = warning.range && warning.range.length > 0 ? warning.range[0]?.start.line : undefined;
+
+      // TODO: When GitHub's annotations support showing ranges properly, we can use this code
+      // let startLine: number | undefined, endLine: number | undefined;
+      // for (const range of warning.range ?? []) {
+      //   if (range.start.line && (!startLine || range.start.line < startLine)) {
+      //     startLine = range.start.line;
+      //   }
+      //   if (range.end.line && (!endLine || range.end.line > endLine)) {
+      //     endLine = range.end.line;
+      //   }
+      // }
+
+      let annotated = false;
+      for (const dockerfile of dockerfiles) {
+        // a valid dockerfile path and content is required to match the warning
+        // source info or always assume it's valid if this is a remote git
+        // context as we can't read the content of the Dockerfile in this case.
+        if (dockerfile.remote || (dockerfile.path.endsWith(warningSourceFilename) && dockerfile.content === warningSourceData)) {
+          annotations.push({
+            title: title,
+            message: message,
+            file: dockerfile.path,
+            startLine: startLine
+          });
+          annotated = true;
+          break;
+        }
+      }
+      if (!annotated) {
+        core.debug(`Buildx.convertWarningsToGitHubAnnotations: skipping warning without matching Dockerfile ${warningSourceFilename}: ${title}`);
+      }
+    }
+
+    return annotations;
+  }
 }
--- a/src/buildx/history.ts
+++ b/src/buildx/history.ts
@@ -0,0 +1,211 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {ChildProcessByStdio, spawn} from 'child_process';
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import {Readable, Writable} from 'stream';
+import * as core from '@actions/core';
+
+import {Buildx} from './buildx';
+import {Context} from '../context';
+import {Docker} from '../docker/docker';
+import {Exec} from '../exec';
+import {GitHub} from '../github';
+
+import {ExportRecordOpts, ExportRecordResponse, Summaries} from '../types/buildx/history';
+
+export interface HistoryOpts {
+  buildx?: Buildx;
+}
+
+export class History {
+  private readonly buildx: Buildx;
+
+  private static readonly EXPORT_BUILD_IMAGE_DEFAULT: string = 'docker.io/dockereng/export-build:latest';
+  private static readonly EXPORT_BUILD_IMAGE_ENV: string = 'DOCKER_BUILD_EXPORT_BUILD_IMAGE';
+
+  constructor(opts?: HistoryOpts) {
+    this.buildx = opts?.buildx || new Buildx();
+  }
+
+  public async export(opts: ExportRecordOpts): Promise<ExportRecordResponse> {
+    if (os.platform() === 'win32') {
+      throw new Error('Exporting a build record is currently not supported on Windows');
+    }
+    if (!(await Docker.isAvailable())) {
+      throw new Error('Docker is required to export a build record');
+    }
+    if (!(await Docker.isDaemonRunning())) {
+      throw new Error('Docker daemon needs to be running to export a build record');
+    }
+    if (!(await this.buildx.versionSatisfies('>=0.13.0'))) {
+      throw new Error('Buildx >= 0.13.0 is required to export a build record');
+    }
+
+    let builderName: string = '';
+    let nodeName: string = '';
+    const refs: Array<string> = [];
+    for (const ref of opts.refs) {
+      const refParts = ref.split('/');
+      if (refParts.length != 3) {
+        throw new Error(`Invalid build ref: ${ref}`);
+      }
+      refs.push(refParts[2]);
+
+      // Set builder name and node name from the first ref if not already set.
+      // We assume all refs are from the same builder and node.
+      if (!builderName) {
+        builderName = refParts[0];
+      }
+      if (!nodeName) {
+        nodeName = refParts[1];
+      }
+    }
+    if (refs.length === 0) {
+      throw new Error('No build refs provided');
+    }
+
+    const outDir = path.join(Context.tmpDir(), 'export');
+    core.info(`exporting build record to ${outDir}`);
+    fs.mkdirSync(outDir, {recursive: true});
+
+    const buildxInFifoPath = Context.tmpName({
+      template: 'buildx-in-XXXXXX.fifo',
+      tmpdir: Context.tmpDir()
+    });
+    await Exec.exec('mkfifo', [buildxInFifoPath]);
+
+    const buildxOutFifoPath = Context.tmpName({
+      template: 'buildx-out-XXXXXX.fifo',
+      tmpdir: Context.tmpDir()
+    });
+    await Exec.exec('mkfifo', [buildxOutFifoPath]);
+
+    const buildxDialStdioCmd = await this.buildx.getCommand(['--builder', builderName, 'dial-stdio']);
+    core.info(`[command]${buildxDialStdioCmd.command} ${buildxDialStdioCmd.args.join(' ')}`);
+    const buildxDialStdioProc = spawn(buildxDialStdioCmd.command, buildxDialStdioCmd.args, {
+      stdio: ['pipe', 'pipe', 'inherit'],
+      detached: true
+    });
+    let buildxDialStdioKilled = false;
+    fs.createReadStream(buildxInFifoPath).pipe(buildxDialStdioProc.stdin);
+    buildxDialStdioProc.stdout.pipe(fs.createWriteStream(buildxOutFifoPath));
+    buildxDialStdioProc.on('exit', (code, signal) => {
+      buildxDialStdioKilled = true;
+      if (signal) {
+        core.info(`Process "buildx dial-stdio" was killed with signal ${signal}`);
+      } else {
+        core.info(`Process "buildx dial-stdio" exited with code ${code}`);
+      }
+    });
+
+    const tmpDockerbuildFilename = path.join(outDir, 'rec.dockerbuild');
+    const summaryFilename = path.join(outDir, 'summary.json');
+
+    let dockerRunProc: ChildProcessByStdio<Writable, Readable, null> | undefined;
+    let dockerRunProcKilled = false;
+    await new Promise<void>((resolve, reject) => {
+      const ebargs: Array<string> = ['--ref-state-dir=/buildx-refs', `--node=${builderName}/${nodeName}`];
+      for (const ref of refs) {
+        ebargs.push(`--ref=${ref}`);
+      }
+      if (typeof process.getuid === 'function') {
+        ebargs.push(`--uid=${process.getuid()}`);
+      }
+      if (typeof process.getgid === 'function') {
+        ebargs.push(`--gid=${process.getgid()}`);
+      }
+      // prettier-ignore
+      const dockerRunArgs = [
+        'run', '--rm', '-i',
+        '-v', `${Buildx.refsDir}:/buildx-refs`,
+        '-v', `${outDir}:/out`,
+        opts.image || process.env[History.EXPORT_BUILD_IMAGE_ENV] || History.EXPORT_BUILD_IMAGE_DEFAULT,
+        ...ebargs
+      ]
+      core.info(`[command]docker ${dockerRunArgs.join(' ')}`);
+      dockerRunProc = spawn('docker', dockerRunArgs, {
+        stdio: ['pipe', 'pipe', 'inherit'],
+        env: {
+          ...process.env,
+          DOCKER_CONTENT_TRUST: 'false'
+        }
+      });
+      fs.createReadStream(buildxOutFifoPath).pipe(dockerRunProc.stdin);
+      dockerRunProc.stdout.pipe(fs.createWriteStream(buildxInFifoPath));
+      dockerRunProc.on('close', code => {
+        if (code === 0) {
+          if (!fs.existsSync(tmpDockerbuildFilename)) {
+            reject(new Error(`Failed to export build record: ${tmpDockerbuildFilename} not found`));
+          } else {
+            resolve();
+          }
+        } else {
+          reject(new Error(`Process "docker run" closed with code ${code}`));
+        }
+      });
+      dockerRunProc.on('error', err => {
+        core.error(`Error executing "docker run": ${err}`);
+        reject(err);
+      });
+      dockerRunProc.on('exit', (code, signal) => {
+        dockerRunProcKilled = true;
+        if (signal) {
+          core.info(`Process "docker run" was killed with signal ${signal}`);
+        } else {
+          core.info(`Process "docker run" exited with code ${code}`);
+        }
+      });
+    })
+      .catch(err => {
+        throw err;
+      })
+      .finally(() => {
+        if (buildxDialStdioProc && !buildxDialStdioKilled) {
+          core.debug('Force terminating "buildx dial-stdio" process');
+          buildxDialStdioProc.kill('SIGKILL');
+        }
+        if (dockerRunProc && !dockerRunProcKilled) {
+          core.debug('Force terminating "docker run" process');
+          dockerRunProc.kill('SIGKILL');
+        }
+      });
+
+    let dockerbuildFilename = `${GitHub.context.repo.owner}~${GitHub.context.repo.repo}~${refs[0].substring(0, 6).toUpperCase()}`;
+    if (refs.length > 1) {
+      dockerbuildFilename += `+${refs.length - 1}`;
+    }
+
+    const dockerbuildPath = path.join(outDir, `${dockerbuildFilename}.dockerbuild`);
+    fs.renameSync(tmpDockerbuildFilename, dockerbuildPath);
+    const dockerbuildStats = fs.statSync(dockerbuildPath);
+
+    core.info(`Parsing ${summaryFilename}`);
+    fs.statSync(summaryFilename);
+    const summaries = <Summaries>JSON.parse(fs.readFileSync(summaryFilename, {encoding: 'utf-8'}));
+
+    return {
+      dockerbuildFilename: dockerbuildPath,
+      dockerbuildSize: dockerbuildStats.size,
+      summaries: summaries,
+      builderName: builderName,
+      nodeName: nodeName,
+      refs: refs
+    };
+  }
+}
--- a/src/buildx/inputs.ts
+++ b/src/buildx/inputs.ts
@@ -1,186 +0,0 @@
-/**
- * Copyright 2023 actions-toolkit authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import fs from 'fs';
-import path from 'path';
-import * as core from '@actions/core';
-import {parse} from 'csv-parse/sync';
-
-import {Context} from '../context';
-
-const parseKvp = (kvp: string): [string, string] => {
-  const delimiterIndex = kvp.indexOf('=');
-  const key = kvp.substring(0, delimiterIndex);
-  const value = kvp.substring(delimiterIndex + 1);
-
-  if (key.length == 0 || value.length == 0) {
-    throw new Error(`${kvp} is not a valid secret`);
-  }
-
-  return [key, value];
-};
-
-export class Inputs {
-  public static getBuildImageIDFilePath(): string {
-    return path.join(Context.tmpDir(), 'iidfile');
-  }
-
-  public static getBuildMetadataFilePath(): string {
-    return path.join(Context.tmpDir(), 'metadata-file');
-  }
-
-  public static resolveBuildImageID(): string | undefined {
-    const iidFile = Inputs.getBuildImageIDFilePath();
-    if (!fs.existsSync(iidFile)) {
-      return undefined;
-    }
-    return fs.readFileSync(iidFile, {encoding: 'utf-8'}).trim();
-  }
-
-  public static resolveBuildMetadata(): string | undefined {
-    const metadataFile = Inputs.getBuildMetadataFilePath();
-    if (!fs.existsSync(metadataFile)) {
-      return undefined;
-    }
-    const content = fs.readFileSync(metadataFile, {encoding: 'utf-8'}).trim();
-    if (content === 'null') {
-      return undefined;
-    }
-    return content;
-  }
-
-  public static resolveDigest(): string | undefined {
-    const metadata = Inputs.resolveBuildMetadata();
-    if (metadata === undefined) {
-      return undefined;
-    }
-    const metadataJSON = JSON.parse(metadata);
-    if (metadataJSON['containerimage.digest']) {
-      return metadataJSON['containerimage.digest'];
-    }
-    return undefined;
-  }
-
-  public static resolveBuildSecretString(kvp: string): string {
-    return Inputs.resolveBuildSecret(kvp, false);
-  }
-
-  public static resolveBuildSecretFile(kvp: string): string {
-    return Inputs.resolveBuildSecret(kvp, true);
-  }
-
-  public static resolveBuildSecretEnv(kvp: string): string {
-    const [key, value] = parseKvp(kvp);
-
-    return `id=${key},env=${value}`;
-  }
-
-  public static resolveBuildSecret(kvp: string, file: boolean): string {
-    const [key, _value] = parseKvp(kvp);
-
-    let value = _value;
-
-    if (file) {
-      if (!fs.existsSync(value)) {
-        throw new Error(`secret file ${value} not found`);
-      }
-      value = fs.readFileSync(value, {encoding: 'utf-8'});
-    }
-    const secretFile = Context.tmpName({tmpdir: Context.tmpDir()});
-    fs.writeFileSync(secretFile, value);
-    return `id=${key},src=${secretFile}`;
-  }
-
-  public static getProvenanceInput(name: string): string {
-    const input = core.getInput(name);
-    if (!input) {
-      // if input is not set returns empty string
-      return input;
-    }
-    try {
-      return core.getBooleanInput(name) ? `builder-id=${Context.provenanceBuilderID()}` : 'false';
-    } catch (err) {
-      // not a valid boolean, so we assume it's a string
-      return Inputs.resolveProvenanceAttrs(input);
-    }
-  }
-
-  public static resolveProvenanceAttrs(input: string): string {
-    if (!input) {
-      return `builder-id=${Context.provenanceBuilderID()}`;
-    }
-    // parse attributes from input
-    const fields = parse(input, {
-      relaxColumnCount: true,
-      skipEmptyLines: true
-    })[0];
-    // check if builder-id attribute exists in the input
-    for (const field of fields) {
-      const parts = field
-        .toString()
-        .split(/(?<=^[^=]+?)=/)
-        .map(item => item.trim());
-      if (parts[0] == 'builder-id') {
-        return input;
-      }
-    }
-    // if not add builder-id attribute
-    return `${input},builder-id=${Context.provenanceBuilderID()}`;
-  }
-
-  public static hasLocalExporter(exporters: string[]): boolean {
-    return Inputs.hasExporterType('local', exporters);
-  }
-
-  public static hasTarExporter(exporters: string[]): boolean {
-    return Inputs.hasExporterType('tar', exporters);
-  }
-
-  public static hasDockerExporter(exporters: string[], load?: boolean): boolean {
-    return load || Inputs.hasExporterType('docker', exporters);
-  }
-
-  public static hasExporterType(name: string, exporters: string[]): boolean {
-    const records = parse(exporters.join(`\n`), {
-      delimiter: ',',
-      trim: true,
-      columns: false,
-      relaxColumnCount: true
-    });
-    for (const record of records) {
-      if (record.length == 1 && !record[0].startsWith('type=')) {
-        // Local if no type is defined
-        // https://github.com/docker/buildx/blob/d2bf42f8b4784d83fde17acb3ed84703ddc2156b/build/output.go#L29-L43
-        return name == 'local';
-      }
-      for (const [key, value] of record.map(chunk => chunk.split('=').map(item => item.trim()))) {
-        if (key == 'type' && value == name) {
-          return true;
-        }
-      }
-    }
-    return false;
-  }
-
-  public static hasGitAuthTokenSecret(secrets: string[]): boolean {
-    for (const secret of secrets) {
-      if (secret.startsWith('GIT_AUTH_TOKEN=')) {
-        return true;
-      }
-    }
-    return false;
-  }
-}
--- a/src/buildx/install.ts
+++ b/src/buildx/install.ts
@@ -14,25 +14,24 @@
 * limitations under the License.
 */

-import crypto from 'crypto';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as core from '@actions/core';
 import * as httpm from '@actions/http-client';
 import * as tc from '@actions/tool-cache';
-import * as cache from '@actions/cache';
 import * as semver from 'semver';
 import * as util from 'util';

 import {Buildx} from './buildx';
+import {Cache} from '../cache';
 import {Context} from '../context';
 import {Exec} from '../exec';
 import {Docker} from '../docker/docker';
 import {Git} from '../git';
 import {Util} from '../util';

-import {DownloadVersion} from '../types/buildx';
+import {DownloadVersion} from '../types/buildx/buildx';
 import {GitHubRelease} from '../types/github';

 export interface InstallOpts {
@@ -48,10 +47,11 @@ export class Install {

  /*
   * Download buildx binary from GitHub release
-   * @param version semver version or latest
+   * @param v: version semver version or latest
+   * @param ghaNoCache: disable binary caching in GitHub Actions cache backend
   * @returns path to the buildx binary
   */
-  public async download(v: string): Promise<string> {
+  public async download(v: string, ghaNoCache?: boolean): Promise<string> {
    const version: DownloadVersion = await Install.getDownloadVersion(v);
    core.debug(`Install.download version: ${version.version}`);

@@ -66,7 +66,13 @@ export class Install {
      throw new Error(`Invalid Buildx version "${vspec}".`);
    }

-    const installCache = new InstallCache(version.key != 'official' ? `buildx-dl-bin-${version.key}` : 'buildx-dl-bin', vspec);
+    const installCache = new Cache({
+      htcName: version.key != 'official' ? `buildx-dl-bin-${version.key}` : 'buildx-dl-bin',
+      htcVersion: vspec,
+      baseCacheDir: path.join(Buildx.configDir, '.bin'),
+      cacheFile: os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx',
+      ghaNoCache: ghaNoCache
+    });

    const cacheFoundPath = await installCache.find();
    if (cacheFoundPath) {
@@ -87,14 +93,21 @@ export class Install {

  /*
   * Build buildx binary from source
-   * @param gitContext git repo context
+   * @param gitContext: git repo context
+   * @param ghaNoCache: disable binary caching in GitHub Actions cache backend
   * @returns path to the buildx binary
   */
-  public async build(gitContext: string): Promise<string> {
+  public async build(gitContext: string, ghaNoCache?: boolean): Promise<string> {
    const vspec = await this.vspec(gitContext);
    core.debug(`Install.build vspec: ${vspec}`);

-    const installCache = new InstallCache('buildx-build-bin', vspec);
+    const installCache = new Cache({
+      htcName: 'buildx-build-bin',
+      htcVersion: vspec,
+      baseCacheDir: path.join(Buildx.configDir, '.bin'),
+      cacheFile: os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx',
+      ghaNoCache: ghaNoCache
+    });

    const cacheFoundPath = await installCache.find();
    if (cacheFoundPath) {
@@ -252,7 +265,7 @@ export class Install {

    const [owner, repo] = baseURL.substring('https://github.com/'.length).split('/');
    const key = `${owner}/${Util.trimSuffix(repo, '.git')}/${sha}`;
-    const hash = crypto.createHash('sha256').update(key).digest('hex');
+    const hash = Util.hash(key);
    core.info(`Use ${hash} version spec cache key for ${key}`);
    return hash;
  }
@@ -301,74 +314,3 @@ export class Install {
    return releases[version.version];
  }
 }
-
-class InstallCache {
-  private readonly htcName: string;
-  private readonly htcVersion: string;
-  private readonly ghaCacheKey: string;
-  private readonly cacheDir: string;
-  private readonly cacheFile: string;
-  private readonly cachePath: string;
-
-  constructor(htcName: string, htcVersion: string) {
-    this.htcName = htcName;
-    this.htcVersion = htcVersion;
-    this.ghaCacheKey = util.format('%s-%s-%s', this.htcName, this.htcVersion, this.platform());
-    this.cacheDir = path.join(Buildx.configDir, '.bin', htcVersion, this.platform());
-    this.cacheFile = os.platform() == 'win32' ? 'docker-buildx.exe' : 'docker-buildx';
-    this.cachePath = path.join(this.cacheDir, this.cacheFile);
-    if (!fs.existsSync(this.cacheDir)) {
-      fs.mkdirSync(this.cacheDir, {recursive: true});
-    }
-  }
-
-  public async save(file: string): Promise<string> {
-    core.debug(`InstallCache.save ${file}`);
-    const cachePath = this.copyToCache(file);
-
-    const htcPath = await tc.cacheDir(this.cacheDir, this.htcName, this.htcVersion, this.platform());
-    core.debug(`InstallCache.save cached to hosted tool cache ${htcPath}`);
-
-    if (cache.isFeatureAvailable()) {
-      core.debug(`InstallCache.save caching ${this.ghaCacheKey} to GitHub Actions cache`);
-      await cache.saveCache([this.cacheDir], this.ghaCacheKey);
-    }
-
-    return cachePath;
-  }
-
-  public async find(): Promise<string> {
-    let htcPath = tc.find(this.htcName, this.htcVersion, this.platform());
-    if (htcPath) {
-      core.info(`Restored from hosted tool cache ${htcPath}`);
-      return this.copyToCache(`${htcPath}/${this.cacheFile}`);
-    }
-
-    if (cache.isFeatureAvailable()) {
-      core.debug(`GitHub Actions cache feature available`);
-      if (await cache.restoreCache([this.cacheDir], this.ghaCacheKey)) {
-        core.info(`Restored ${this.ghaCacheKey} from GitHub Actions cache`);
-        htcPath = await tc.cacheDir(this.cacheDir, this.htcName, this.htcVersion, this.platform());
-        core.info(`Restored to hosted tool cache ${htcPath}`);
-        return this.copyToCache(`${htcPath}/${this.cacheFile}`);
-      }
-    } else {
-      core.info(`GitHub Actions cache feature not available`);
-    }
-
-    return '';
-  }
-
-  private copyToCache(file: string): string {
-    core.debug(`Copying ${file} to ${this.cachePath}`);
-    fs.copyFileSync(file, this.cachePath);
-    fs.chmodSync(this.cachePath, '0755');
-    return this.cachePath;
-  }
-
-  private platform(): string {
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    const arm_version = (process.config.variables as any).arm_version;
-    return `${os.platform()}-${os.arch()}${arm_version ? 'v' + arm_version : ''}`;
-  }
-}
--- a/src/cache.ts
+++ b/src/cache.ts
@@ -0,0 +1,134 @@
+/**
+ * Copyright 2023 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import * as core from '@actions/core';
+import * as tc from '@actions/tool-cache';
+import * as cache from '@actions/cache';
+import * as util from 'util';
+
+export interface CacheOpts {
+  htcName: string;
+  htcVersion: string;
+  baseCacheDir: string;
+  cacheFile: string;
+  ghaNoCache?: boolean;
+}
+
+export interface CachePostState {
+  dir: string;
+  key: string;
+}
+
+export class Cache {
+  private readonly opts: CacheOpts;
+  private readonly ghaCacheKey: string;
+  private readonly ghaNoCache?: boolean;
+  private readonly cacheDir: string;
+  private readonly cachePath: string;
+
+  private static readonly POST_CACHE_KEY = 'postCache';
+
+  constructor(opts: CacheOpts) {
+    this.opts = opts;
+    this.ghaCacheKey = util.format('%s-%s-%s', this.opts.htcName, this.opts.htcVersion, this.platform());
+    this.ghaNoCache = this.opts.ghaNoCache;
+    this.cacheDir = path.join(this.opts.baseCacheDir, this.opts.htcVersion, this.platform());
+    this.cachePath = path.join(this.cacheDir, this.opts.cacheFile);
+    if (!fs.existsSync(this.cacheDir)) {
+      fs.mkdirSync(this.cacheDir, {recursive: true});
+    }
+  }
+
+  public async save(file: string): Promise<string> {
+    core.debug(`Cache.save ${file}`);
+    const cachePath = this.copyToCache(file);
+
+    const htcPath = await tc.cacheDir(this.cacheDir, this.opts.htcName, this.opts.htcVersion, this.platform());
+    core.debug(`Cache.save cached to hosted tool cache ${htcPath}`);
+
+    if (!this.ghaNoCache && cache.isFeatureAvailable()) {
+      core.debug(`Cache.save sending ${this.ghaCacheKey} to post state`);
+      core.saveState(
+        Cache.POST_CACHE_KEY,
+        JSON.stringify({
+          dir: this.cacheDir,
+          key: this.ghaCacheKey
+        } as CachePostState)
+      );
+    }
+
+    return cachePath;
+  }
+
+  public async find(): Promise<string> {
+    let htcPath = tc.find(this.opts.htcName, this.opts.htcVersion, this.platform());
+    if (htcPath) {
+      core.info(`Restored from hosted tool cache ${htcPath}`);
+      return this.copyToCache(`${htcPath}/${this.opts.cacheFile}`);
+    }
+
+    if (!this.ghaNoCache && cache.isFeatureAvailable()) {
+      core.debug(`GitHub Actions cache feature available`);
+      if (await cache.restoreCache([this.cacheDir], this.ghaCacheKey)) {
+        core.info(`Restored ${this.ghaCacheKey} from GitHub Actions cache`);
+        htcPath = await tc.cacheDir(this.cacheDir, this.opts.htcName, this.opts.htcVersion, this.platform());
+        core.info(`Cached to hosted tool cache ${htcPath}`);
+        return this.copyToCache(`${htcPath}/${this.opts.cacheFile}`);
+      }
+    } else if (this.ghaNoCache) {
+      core.info(`GitHub Actions cache disabled`);
+    } else {
+      core.info(`GitHub Actions cache feature not available`);
+    }
+
+    return '';
+  }
+
+  public static async post(): Promise<CachePostState | undefined> {
+    const state = core.getState(Cache.POST_CACHE_KEY);
+    if (!state) {
+      core.info(`State not set`);
+      return Promise.resolve(undefined);
+    }
+    let cacheState: CachePostState;
+    try {
+      cacheState = <CachePostState>JSON.parse(state);
+    } catch (e) {
+      throw new Error(`Failed to parse cache post state: ${e}`);
+    }
+    if (!cacheState.dir || !cacheState.key) {
+      throw new Error(`Invalid cache post state: ${state}`);
+    }
+    core.info(`Caching ${cacheState.key} to GitHub Actions cache`);
+    await cache.saveCache([cacheState.dir], cacheState.key);
+    return cacheState;
+  }
+
+  private copyToCache(file: string): string {
+    core.debug(`Copying ${file} to ${this.cachePath}`);
+    fs.copyFileSync(file, this.cachePath);
+    return this.cachePath;
+  }
+
+  private platform(): string {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const arm_version = (process.config.variables as any).arm_version;
+    return `${os.platform()}-${os.arch()}${arm_version ? 'v' + arm_version : ''}`;
+  }
+}
--- a/src/docker/assets.ts
+++ b/src/docker/assets.ts
@@ -79,6 +79,9 @@ if (Get-Service docker -ErrorAction SilentlyContinue) {
  Write-Host "Service removed"
 }

+$env:Path = "$ToolDir;" + [System.Environment]::GetEnvironmentVariable("Path","Machine") + ";" + [System.Environment]::GetEnvironmentVariable("Path","User")
+Write-Host "Path: $env:Path"
+
 $env:DOCKER_HOST = $DockerHost
 Write-Host "DOCKER_HOST: $env:DOCKER_HOST"

@@ -144,6 +147,11 @@ os: null
 arch: null

 images:
+{{#each customImages}}
+- location: "{{location}}"
+  arch: "{{arch}}"
+  digest: "{{digest}}"
+{{/each}}
 - location: "https://cloud-images.ubuntu.com/releases/22.04/release-20231026/ubuntu-22.04-server-cloudimg-amd64.img"
  arch: "x86_64"
  digest: "sha256:054db2d88c454bb0ad8dfd8883955e3946b57d2b0bf0d023f3ade3c93cdd14e5"
--- a/src/docker/docker.ts
+++ b/src/docker/docker.ts
@@ -18,11 +18,15 @@ import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as core from '@actions/core';
+import {ExecOptions, ExecOutput} from '@actions/exec';
 import * as io from '@actions/io';

+import {Context} from '../context';
+import {Cache} from '../cache';
 import {Exec} from '../exec';
+import {Util} from '../util';

-import {ConfigFile} from '../types/docker';
+import {ConfigFile, ContextInfo} from '../types/docker/docker';

 export class Docker {
  static get configDir(): string {
@@ -50,12 +54,47 @@ export class Docker {
      });
  }

+  public static async isDaemonRunning(): Promise<boolean> {
+    try {
+      await Docker.getExecOutput([`version`], {
+        silent: true
+      });
+      return true;
+    } catch (e) {
+      return false;
+    }
+  }
+
+  public static async exec(args?: string[], options?: ExecOptions): Promise<number> {
+    return Exec.exec('docker', args, Docker.execOptions(options));
+  }
+
+  public static async getExecOutput(args?: string[], options?: ExecOptions): Promise<ExecOutput> {
+    return Exec.getExecOutput('docker', args, Docker.execOptions(options));
+  }
+
+  private static execOptions(options?: ExecOptions): ExecOptions {
+    if (!options) {
+      options = {};
+    }
+    if (!options.env) {
+      options.env = Object.assign({}, process.env, {
+        DOCKER_CONTENT_TRUST: 'false'
+      }) as {
+        [key: string]: string;
+      };
+    } else {
+      options.env.DOCKER_CONTENT_TRUST = 'false';
+    }
+    return options;
+  }
+
  public static async context(name?: string): Promise<string> {
    const args = ['context', 'inspect', '--format', '{{.Name}}'];
    if (name) {
      args.push(name);
    }
-    return await Exec.getExecOutput(`docker`, args, {
+    return await Docker.getExecOutput(args, {
      ignoreReturnCode: true,
      silent: true
    }).then(res => {
@@ -66,11 +105,112 @@ export class Docker {
    });
  }

+  public static async contextInspect(name?: string): Promise<ContextInfo> {
+    const args = ['context', 'inspect', '--format=json'];
+    if (name) {
+      args.push(name);
+    }
+    return await Docker.getExecOutput(args, {
+      ignoreReturnCode: true,
+      silent: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(res.stderr.trim());
+      }
+      return (<Array<ContextInfo>>JSON.parse(res.stdout.trim()))[0];
+    });
+  }
+
  public static async printVersion(): Promise<void> {
-    await Exec.exec('docker', ['version']);
+    await Docker.exec(['version']);
  }

  public static async printInfo(): Promise<void> {
-    await Exec.exec('docker', ['info']);
+    await Docker.exec(['info']);
+  }
+
+  public static parseRepoTag(image: string): {repository: string; tag: string} {
+    let sepPos: number;
+    const digestPos = image.indexOf('@');
+    const colonPos = image.lastIndexOf(':');
+    if (digestPos >= 0) {
+      // priority on digest
+      sepPos = digestPos;
+    } else if (colonPos >= 0) {
+      sepPos = colonPos;
+    } else {
+      return {
+        repository: image,
+        tag: 'latest'
+      };
+    }
+    const tag = image.slice(sepPos + 1);
+    if (tag.indexOf('/') === -1) {
+      return {
+        repository: image.slice(0, sepPos),
+        tag: tag
+      };
+    }
+    return {
+      repository: image,
+      tag: 'latest'
+    };
+  }
+
+  public static async pull(image: string, cache?: boolean): Promise<void> {
+    const parsedImage = Docker.parseRepoTag(image);
+    const repoSanitized = parsedImage.repository.replace(/[^a-zA-Z0-9.]+/g, '--');
+    const tagSanitized = parsedImage.tag.replace(/[^a-zA-Z0-9.]+/g, '--');
+
+    const imageCache = new Cache({
+      htcName: repoSanitized,
+      htcVersion: tagSanitized,
+      baseCacheDir: path.join(Docker.configDir, '.cache', 'images', repoSanitized),
+      cacheFile: 'image.tar'
+    });
+
+    let cacheFoundPath: string | undefined;
+    if (cache) {
+      cacheFoundPath = await imageCache.find();
+      if (cacheFoundPath) {
+        core.info(`Image found from cache in ${cacheFoundPath}`);
+        await Docker.getExecOutput(['load', '-i', cacheFoundPath], {
+          ignoreReturnCode: true
+        }).then(res => {
+          if (res.stderr.length > 0 && res.exitCode != 0) {
+            core.warning(`Failed to load image from cache: ${res.stderr.match(/(.*)\s*$/)?.[0]?.trim() ?? 'unknown error'}`);
+          }
+        });
+      }
+    }
+
+    let pulled = true;
+    await Docker.getExecOutput(['pull', image], {
+      ignoreReturnCode: true
+    }).then(res => {
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        pulled = false;
+        const err = res.stderr.match(/(.*)\s*$/)?.[0]?.trim() ?? 'unknown error';
+        if (cacheFoundPath) {
+          core.warning(`Failed to pull image, using one from cache: ${err}`);
+        } else {
+          throw new Error(err);
+        }
+      }
+    });
+
+    if (cache && pulled) {
+      const imageTarPath = path.join(Context.tmpDir(), `${Util.hash(image)}.tar`);
+      await Docker.getExecOutput(['save', '-o', imageTarPath, image], {
+        ignoreReturnCode: true
+      }).then(async res => {
+        if (res.stderr.length > 0 && res.exitCode != 0) {
+          core.warning(`Failed to save image: ${res.stderr.match(/(.*)\s*$/)?.[0]?.trim() ?? 'unknown error'}`);
+        } else {
+          const cachePath = await imageCache.save(imageTarPath);
+          core.info(`Image cached to ${cachePath}`);
+        }
+      });
+    }
  }
 }
--- a/src/docker/install.ts
+++ b/src/docker/install.ts
@@ -28,6 +28,7 @@ import * as io from '@actions/io';
 import * as tc from '@actions/tool-cache';

 import {Context} from '../context';
+import {Docker} from './docker';
 import {Exec} from '../exec';
 import {Util} from '../util';
 import {limaYamlData, dockerServiceLogsPs1, setupDockerWinPs1} from './assets';
@@ -41,6 +42,12 @@ export interface InstallOpts {
  daemonConfig?: string;
 }

+interface LimaImage {
+  location: string;
+  arch: string;
+  digest?: string;
+}
+
 export class Install {
  private readonly runDir: string;
  private readonly version: string;
@@ -105,7 +112,7 @@ export class Install {
    return tooldir;
  }

-  public async install(): Promise<void> {
+  public async install(): Promise<string> {
    if (!this.toolDir) {
      throw new Error('toolDir must be set. Run download first.');
    }
@@ -114,16 +121,13 @@ export class Install {
    }
    switch (os.platform()) {
      case 'darwin': {
-        await this.installDarwin();
-        break;
+        return await this.installDarwin();
      }
      case 'linux': {
-        await this.installLinux();
-        break;
+        return await this.installLinux();
      }
      case 'win32': {
-        await this.installWindows();
-        break;
+        return await this.installWindows();
      }
      default: {
        throw new Error(`Unsupported platform: ${os.platform()}`);
@@ -131,13 +135,14 @@ export class Install {
    }
  }

-  private async installDarwin(): Promise<void> {
+  private async installDarwin(): Promise<string> {
    const limaDir = path.join(os.homedir(), '.lima', this.limaInstanceName);
    await io.mkdirP(limaDir);
    const dockerHost = `unix://${limaDir}/docker.sock`;

-    // avoid brew to upgrade unrelated packages.
+    // avoid brew to auto update and upgrade unrelated packages.
    let envs = Object.assign({}, process.env, {
+      HOMEBREW_NO_AUTO_UPDATE: '1',
      HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK: '1'
    }) as {
      [key: string]: string;
@@ -149,6 +154,10 @@ export class Install {
      });
    }

+    await core.group('Lima version', async () => {
+      await Exec.exec('lima', ['--version'], {env: envs});
+    });
+
    await core.group('Creating lima config', async () => {
      let limaDaemonConfig = {};
      if (this.daemonConfig) {
@@ -158,6 +167,7 @@ export class Install {
        return new handlebars.SafeString(JSON.stringify(obj));
      });
      const limaCfg = handlebars.compile(limaYamlData)({
+        customImages: Install.limaCustomImages(),
        daemonConfig: limaDaemonConfig,
        dockerSock: `${limaDir}/docker.sock`,
        dockerBinVersion: this._version,
@@ -182,7 +192,7 @@ export class Install {
    };

    await core.group('Starting lima instance', async () => {
-      const limaStartArgs = ['start', `--name=${this.limaInstanceName}`, '--tty=false'];
+      const limaStartArgs = ['start', `--name=${this.limaInstanceName}`];
      if (process.env.LIMA_START_ARGS) {
        limaStartArgs.push(process.env.LIMA_START_ARGS);
      }
@@ -210,12 +220,14 @@ export class Install {
    });

    await core.group('Create Docker context', async () => {
-      await Exec.exec('docker', ['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
-      await Exec.exec('docker', ['context', 'use', this.contextName]);
+      await Docker.exec(['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
+      await Docker.exec(['context', 'use', this.contextName]);
    });
+
+    return dockerHost;
  }

-  private async installLinux(): Promise<void> {
+  private async installLinux(): Promise<string> {
    const dockerHost = `unix://${path.join(this.runDir, 'docker.sock')}`;
    await io.mkdirP(this.runDir);

@@ -242,6 +254,12 @@ export class Install {
      });
    }

+    const envs = Object.assign({}, process.env, {
+      PATH: `${this.toolDir}:${process.env.PATH}`
+    }) as {
+      [key: string]: string;
+    };
+
    await core.group('Start Docker daemon', async () => {
      const bashPath: string = await io.which('bash', true);
      const cmd = `${this.toolDir}/dockerd --host="${dockerHost}" --config-file="${daemonConfigPath}" --exec-root="${this.runDir}/execroot" --data-root="${this.runDir}/data" --pidfile="${this.runDir}/docker.pid" --userland-proxy=false`;
@@ -251,11 +269,12 @@ export class Install {
        // avoid killing it when the action finishes running. Even if detached,
        // we also need to run dockerd in a subshell and unref the process so
        // GitHub Action doesn't wait for it to finish.
-        `sudo -E ${bashPath} << EOF
+        `sudo env "PATH=$PATH" ${bashPath} << EOF
 ( ${cmd} 2>&1 | tee "${this.runDir}/dockerd.log" ) &
 EOF`,
        [],
        {
+          env: envs,
          detached: true,
          shell: true,
          stdio: ['ignore', process.stdout, process.stderr]
@@ -269,8 +288,9 @@ EOF`,
          try {
            await Exec.getExecOutput(`docker version`, undefined, {
              silent: true,
-              env: Object.assign({}, process.env, {
-                DOCKER_HOST: dockerHost
+              env: Object.assign({}, envs, {
+                DOCKER_HOST: dockerHost,
+                DOCKER_CONTENT_TRUST: 'false'
              }) as {
                [key: string]: string;
              }
@@ -291,12 +311,14 @@ EOF`,
    });

    await core.group('Create Docker context', async () => {
-      await Exec.exec('docker', ['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
-      await Exec.exec('docker', ['context', 'use', this.contextName]);
+      await Docker.exec(['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
+      await Docker.exec(['context', 'use', this.contextName]);
    });
+
+    return dockerHost;
  }

-  private async installWindows(): Promise<void> {
+  private async installWindows(): Promise<string> {
    const dockerHost = 'npipe:////./pipe/setup_docker_action';

    let daemonConfig = undefined;
@@ -332,9 +354,11 @@ EOF`,
    });

    await core.group('Create Docker context', async () => {
-      await Exec.exec('docker', ['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
-      await Exec.exec('docker', ['context', 'use', this.contextName]);
+      await Docker.exec(['context', 'create', this.contextName, '--docker', `host=${dockerHost}`]);
+      await Docker.exec(['context', 'use', this.contextName]);
    });
+
+    return dockerHost;
  }

  public async tearDown(): Promise<void> {
@@ -373,7 +397,7 @@ EOF`,
      await Exec.exec('limactl', ['delete', '--tty=false', this.limaInstanceName, '--force']);
    });
    await core.group('Removing Docker context', async () => {
-      await Exec.exec('docker', ['context', 'rm', '-f', this.contextName]);
+      await Docker.exec(['context', 'rm', '-f', this.contextName]);
    });
    await core.group(`Cleaning up runDir`, async () => {
      await Exec.exec('sudo', ['rm', '-rf', this.runDir]);
@@ -389,7 +413,7 @@ EOF`,
      await Util.sleep(5);
    });
    await core.group('Removing Docker context', async () => {
-      await Exec.exec('docker', ['context', 'rm', '-f', this.contextName]);
+      await Docker.exec(['context', 'rm', '-f', this.contextName]);
    });
    await core.group(`Cleaning up runDir`, async () => {
      await Exec.exec('sudo', ['rm', '-rf', this.runDir], {
@@ -405,7 +429,7 @@ EOF`,
      await Exec.exec(logCmd.command, logCmd.args);
    });
    await core.group('Removing Docker context', async () => {
-      await Exec.exec('docker', ['context', 'rm', '-f', this.contextName]);
+      await Docker.exec(['context', 'rm', '-f', this.contextName]);
    });
  }

@@ -507,4 +531,25 @@ EOF`,
    }
    return releases[version];
  }
+
+  public static limaCustomImages(): LimaImage[] {
+    const res: LimaImage[] = [];
+    const env = process.env.LIMA_IMAGES;
+    if (!env) {
+      return res;
+    }
+    for (const input of Util.getList(env, {ignoreComma: true, comment: '#'})) {
+      const archIndex = input.indexOf(':');
+      const arch = input.substring(0, archIndex).trim();
+      const digestIndex = input.indexOf('@');
+      const location = input.substring(archIndex + 1, digestIndex !== -1 ? digestIndex : undefined).trim();
+      const digest = digestIndex !== -1 ? input.substring(digestIndex + 1).trim() : '';
+      res.push({
+        location: location,
+        arch: arch,
+        digest: digest
+      });
+    }
+    return res;
+  }
 }
--- a/src/git.ts
+++ b/src/git.ts
@@ -137,12 +137,18 @@ export class Git {
      return `refs/tags/${ref.split(':')[1].trim()}`;
    }

-    // Otherwise, it's a branch "<origin>/<branch-name>, <branch-name>"
+    // Branch refs are formatted as "<origin>/<branch-name>, <branch-name>"
    const branchMatch = ref.match(/^[^/]+\/[^/]+, (.+)$/);
    if (branchMatch) {
      return `refs/heads/${branchMatch[1].trim()}`;
    }

+    // Pull request merge refs are formatted as "pull/<number>/<state>"
+    const prMatch = ref.match(/^pull\/\d+\/(head|merge)$/);
+    if (prMatch) {
+      return `refs/${ref}`;
+    }
+
    throw new Error(`Unsupported detached HEAD ref in "${res}"`);
  }

--- a/src/github.ts
+++ b/src/github.ts
@@ -14,13 +14,30 @@
 * limitations under the License.
 */

-import {GitHub as Octokit} from '@actions/github/lib/utils';
+import crypto from 'crypto';
+import fs from 'fs';
+import he from 'he';
+import jsyaml from 'js-yaml';
+import os from 'os';
+import path from 'path';
+import {CreateArtifactRequest, FinalizeArtifactRequest, StringValue} from '@actions/artifact/lib/generated';
+import {internalArtifactTwirpClient} from '@actions/artifact/lib/internal/shared/artifact-twirp-client';
+import {isGhes} from '@actions/artifact/lib/internal/shared/config';
+import {getBackendIdsFromToken} from '@actions/artifact/lib/internal/shared/util';
+import {getExpiration} from '@actions/artifact/lib/internal/upload/retention';
+import {InvalidResponseError, NetworkError} from '@actions/artifact';
 import * as core from '@actions/core';
+import {SummaryTableCell} from '@actions/core/lib/summary';
 import * as github from '@actions/github';
+import {GitHub as Octokit} from '@actions/github/lib/utils';
 import {Context} from '@actions/github/lib/context';
+import {TransferProgressEvent} from '@azure/core-http';
+import {BlobClient, BlobHTTPHeaders} from '@azure/storage-blob';
 import {jwtDecode, JwtPayload} from 'jwt-decode';

-import {GitHubActionsRuntimeToken, GitHubActionsRuntimeTokenAC, GitHubRepo} from './types/github';
+import {Util} from './util';
+
+import {BuildSummaryOpts, GitHubActionsRuntimeToken, GitHubActionsRuntimeTokenAC, GitHubRepo, UploadArtifactOpts, UploadArtifactResponse} from './types/github';

 export interface GitHubOpts {
  token?: string;
@@ -49,6 +66,34 @@ export class GitHub {
    return process.env.GITHUB_API_URL || 'https://api.github.com';
  }

+  static get isGHES(): boolean {
+    // FIXME: we are using the function from GitHub artifact module but should
+    //  be within core module when available.
+    return isGhes();
+  }
+
+  static get repository(): string {
+    return `${github.context.repo.owner}/${github.context.repo.repo}`;
+  }
+
+  static get workspace(): string {
+    return process.env.GITHUB_WORKSPACE || process.cwd();
+  }
+
+  static get runId(): number {
+    return process.env.GITHUB_RUN_ID ? +process.env.GITHUB_RUN_ID : github.context.runId;
+  }
+
+  static get runAttempt(): number {
+    // TODO: runAttempt is not yet part of github.context but will be in a
+    //  future release of @actions/github package: https://github.com/actions/toolkit/commit/faa425440f86f9c16587a19dfb59491253a2c92a
+    return process.env.GITHUB_RUN_ATTEMPT ? +process.env.GITHUB_RUN_ATTEMPT : 1;
+  }
+
+  public static workflowRunURL(setAttempts?: boolean): string {
+    return `${GitHub.serverURL}/${GitHub.repository}/actions/runs/${GitHub.runId}${setAttempts ? `/attempts/${GitHub.runAttempt}` : ''}`;
+  }
+
  static get actionsRuntimeToken(): GitHubActionsRuntimeToken | undefined {
    const token = process.env['ACTIONS_RUNTIME_TOKEN'] || '';
    return token ? (jwtDecode<JwtPayload>(token) as GitHubActionsRuntimeToken) : undefined;
@@ -86,4 +131,218 @@ export class GitHub {
      throw new Error(`Cannot parse GitHub Actions Runtime Token ACs: ${e.message}`);
    }
  }
+
+  public static async uploadArtifact(opts: UploadArtifactOpts): Promise<UploadArtifactResponse> {
+    if (GitHub.isGHES) {
+      throw new Error('@actions/artifact v2.0.0+ is currently not supported on GHES.');
+    }
+
+    const artifactName = path.basename(opts.filename);
+    const backendIds = getBackendIdsFromToken();
+    const artifactClient = internalArtifactTwirpClient();
+
+    core.info(`Uploading ${artifactName} to blob storage`);
+
+    const createArtifactReq: CreateArtifactRequest = {
+      workflowRunBackendId: backendIds.workflowRunBackendId,
+      workflowJobRunBackendId: backendIds.workflowJobRunBackendId,
+      name: artifactName,
+      version: 4
+    };
+
+    const expiresAt = getExpiration(opts?.retentionDays);
+    if (expiresAt) {
+      createArtifactReq.expiresAt = expiresAt;
+    }
+
+    const createArtifactResp = await artifactClient.CreateArtifact(createArtifactReq);
+    if (!createArtifactResp.ok) {
+      throw new InvalidResponseError('cannot create artifact client');
+    }
+
+    let uploadByteCount = 0;
+    const blobClient = new BlobClient(createArtifactResp.signedUploadUrl);
+    const blockBlobClient = blobClient.getBlockBlobClient();
+
+    const headers: BlobHTTPHeaders = {
+      blobContentDisposition: `attachment; filename="${artifactName}"`
+    };
+    if (opts.mimeType) {
+      headers.blobContentType = opts.mimeType;
+    }
+    core.debug(`Upload headers: ${JSON.stringify(headers)}`);
+
+    try {
+      core.info('Beginning upload of artifact content to blob storage');
+      await blockBlobClient.uploadFile(opts.filename, {
+        blobHTTPHeaders: headers,
+        onProgress: (progress: TransferProgressEvent): void => {
+          core.info(`Uploaded bytes ${progress.loadedBytes}`);
+          uploadByteCount = progress.loadedBytes;
+        }
+      });
+    } catch (error) {
+      if (NetworkError.isNetworkErrorCode(error?.code)) {
+        throw new NetworkError(error?.code);
+      }
+      throw error;
+    }
+
+    core.info('Finished uploading artifact content to blob storage!');
+
+    const sha256Hash = crypto.createHash('sha256').update(fs.readFileSync(opts.filename)).digest('hex');
+    core.info(`SHA256 hash of uploaded artifact is ${sha256Hash}`);
+
+    const finalizeArtifactReq: FinalizeArtifactRequest = {
+      workflowRunBackendId: backendIds.workflowRunBackendId,
+      workflowJobRunBackendId: backendIds.workflowJobRunBackendId,
+      name: artifactName,
+      size: uploadByteCount ? uploadByteCount.toString() : '0'
+    };
+
+    if (sha256Hash) {
+      finalizeArtifactReq.hash = StringValue.create({
+        value: `sha256:${sha256Hash}`
+      });
+    }
+
+    core.info(`Finalizing artifact upload`);
+    const finalizeArtifactResp = await artifactClient.FinalizeArtifact(finalizeArtifactReq);
+    if (!finalizeArtifactResp.ok) {
+      throw new InvalidResponseError('Cannot finalize artifact upload');
+    }
+
+    const artifactId = BigInt(finalizeArtifactResp.artifactId);
+    core.info(`Artifact successfully finalized (${artifactId})`);
+
+    const artifactURL = `${GitHub.workflowRunURL()}/artifacts/${artifactId}`;
+    core.info(`Artifact download URL: ${artifactURL}`);
+
+    return {
+      id: Number(artifactId),
+      filename: artifactName,
+      size: uploadByteCount,
+      url: artifactURL
+    };
+  }
+
+  public static async writeBuildSummary(opts: BuildSummaryOpts): Promise<void> {
+    // can't use original core.summary.addLink due to the need to make
+    // EOL optional
+    const addLink = function (text: string, url: string, addEOL = false): string {
+      return `<a href="${url}">${text}</a>` + (addEOL ? os.EOL : '');
+    };
+
+    const refsSize = Object.keys(opts.exportRes.refs).length;
+
+    const sum = core.summary.addHeading('Docker Build summary', 2);
+
+    if (opts.uploadRes) {
+      // we just need the last two parts of the URL as they are always relative
+      // to the workflow run URL otherwise URL could be broken if GitHub
+      // repository name is part of a secret value used in the workflow. e.g.:
+      //  artifact: https://github.com/docker/actions-toolkit/actions/runs/9552208295/artifacts/1609622746
+      //  workflow: https://github.com/docker/actions-toolkit/actions/runs/9552208295
+      // https://github.com/docker/actions-toolkit/issues/367
+      const artifactRelativeURL = `./${GitHub.runId}/${opts.uploadRes.url.split('/').slice(-2).join('/')}`;
+
+      // prettier-ignore
+      sum.addRaw(`<p>`)
+        .addRaw(`For a detailed look at the build, download the following build record archive and import it into Docker Desktop's Builds view. `)
+        .addBreak()
+        .addRaw(`Build records include details such as timing, dependencies, results, logs, traces, and other information about a build. `)
+        .addRaw(addLink('Learn more', 'https://www.docker.com/blog/new-beta-feature-deep-dive-into-github-actions-docker-builds-with-docker-desktop/?utm_source=github&utm_medium=actions'))
+      .addRaw('</p>')
+      .addRaw(`<p>`)
+        .addRaw(`:arrow_down: ${addLink(`<strong>${Util.stringToUnicodeEntities(opts.uploadRes.filename)}</strong>`, artifactRelativeURL)} (${Util.formatFileSize(opts.uploadRes.size)} - includes <strong>${refsSize} build record${refsSize > 1 ? 's' : ''}</strong>)`)
+      .addRaw(`</p>`);
+    } else {
+      // prettier-ignore
+      sum.addRaw(`<p>`)
+        .addRaw(`The following table provides a brief summary of your build.`)
+        .addBreak()
+        .addRaw(`For a detailed look at the build, including timing, dependencies, results, logs, traces, and other information, consider enabling the export of the build record so you can import it into Docker Desktop's Builds view. `)
+        .addRaw(addLink('Learn more', 'https://www.docker.com/blog/new-beta-feature-deep-dive-into-github-actions-docker-builds-with-docker-desktop/?utm_source=github&utm_medium=actions'))
+      .addRaw(`</p>`);
+    }
+
+    // Feedback survey
+    sum.addRaw(`<p>`).addRaw(`Find this useful? `).addRaw(addLink('Let us know', 'https://docs.docker.com/feedback/gha-build-summary')).addRaw('</p>');
+
+    // Preview
+    sum.addRaw('<p>');
+    const summaryTableData: Array<Array<SummaryTableCell>> = [
+      [
+        {header: true, data: 'ID'},
+        {header: true, data: 'Name'},
+        {header: true, data: 'Status'},
+        {header: true, data: 'Cached'},
+        {header: true, data: 'Duration'}
+      ]
+    ];
+    let buildError: string | undefined;
+    for (const ref in opts.exportRes.summaries) {
+      if (Object.prototype.hasOwnProperty.call(opts.exportRes.summaries, ref)) {
+        const summary = opts.exportRes.summaries[ref];
+        // prettier-ignore
+        summaryTableData.push([
+          {data: `<code>${ref.substring(0, 6).toUpperCase()}</code>`},
+          {data: `<strong>${Util.stringToUnicodeEntities(summary.name)}</strong>`},
+          {data: `${summary.status === 'completed' ? ':white_check_mark:' : summary.status === 'canceled' ? ':no_entry_sign:' : ':x:'} ${summary.status}`},
+          {data: `${summary.numCachedSteps > 0 ? Math.round((summary.numCachedSteps / summary.numTotalSteps) * 100) : 0}%`},
+          {data: summary.duration}
+        ]);
+        if (summary.error) {
+          buildError = summary.error;
+        }
+      }
+    }
+    sum.addTable([...summaryTableData]);
+    sum.addRaw(`</p>`);
+
+    // Build error
+    if (buildError) {
+      sum.addRaw(`<blockquote>`);
+      if (Util.countLines(buildError) > 10) {
+        // prettier-ignore
+        sum
+          .addRaw(`<details><summary><strong>Error</strong></summary>`)
+            .addCodeBlock(he.encode(buildError), 'text')
+          .addRaw(`</details>`);
+      } else {
+        // prettier-ignore
+        sum
+          .addRaw(`<strong>Error</strong>`)
+          .addBreak()
+          .addRaw(`<p>`)
+            .addCodeBlock(he.encode(buildError), 'text')
+          .addRaw(`</p>`);
+      }
+      sum.addRaw(`</blockquote>`);
+    }
+
+    // Build inputs
+    if (opts.inputs) {
+      // prettier-ignore
+      sum.addRaw(`<details><summary><strong>Build inputs</strong></summary>`)
+        .addCodeBlock(
+          jsyaml.dump(opts.inputs, {
+            indent: 2,
+            lineWidth: -1
+          }), 'yaml'
+        )
+        .addRaw(`</details>`);
+    }
+
+    // Bake definition
+    if (opts.bakeDefinition) {
+      // prettier-ignore
+      sum.addRaw(`<details><summary><strong>Bake definition</strong></summary>`)
+        .addCodeBlock(JSON.stringify(opts.bakeDefinition, null, 2), 'json')
+        .addRaw(`</details>`);
+    }
+
+    core.info(`Writing summary`);
+    await sum.addSeparator().write();
+  }
 }
--- a/src/index.ts
+++ b/src/index.ts
@@ -16,6 +16,8 @@

 import * as core from '@actions/core';

+import {Cache} from './cache';
+
 const isPost = !!process.env['STATE_isPost'];
 if (!isPost) {
  core.saveState('isPost', 'true');
@@ -36,7 +38,12 @@ export async function run(main: () => Promise<void>, post?: () => Promise<void>)
    } catch (e) {
      core.setFailed(e.message);
    }
-  } else if (post) {
-    await post();
+  } else {
+    if (post) {
+      await post();
+    }
+    await core.group(`Post cache`, async () => {
+      await Cache.post();
+    });
  }
 }
--- a/src/oci/oci.ts
+++ b/src/oci/oci.ts
@@ -0,0 +1,163 @@
+/**
+ * Copyright 2024 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import fs from 'fs';
+import gunzip from 'gunzip-maybe';
+import * as path from 'path';
+import {Readable} from 'stream';
+import * as tar from 'tar-stream';
+
+import {Archive, LoadArchiveOpts} from '../types/oci/oci';
+import {Index} from '../types/oci';
+import {Manifest} from '../types/oci/manifest';
+import {Image} from '../types/oci/config';
+import {IMAGE_BLOBS_DIR_V1, IMAGE_INDEX_FILE_V1, IMAGE_LAYOUT_FILE_V1, ImageLayout} from '../types/oci/layout';
+import {MEDIATYPE_IMAGE_INDEX_V1, MEDIATYPE_IMAGE_MANIFEST_V1} from '../types/oci/mediatype';
+
+export class OCI {
+  public static loadArchive(opts: LoadArchiveOpts): Promise<Archive> {
+    return new Promise<Archive>((resolve, reject) => {
+      const tarex: tar.Extract = tar.extract();
+
+      let rootIndex: Index;
+      let rootLayout: ImageLayout;
+      const indexes: Record<string, Index> = {};
+      const manifests: Record<string, Manifest> = {};
+      const images: Record<string, Image> = {};
+      const blobs: Record<string, unknown> = {};
+
+      tarex.on('entry', async (header, stream, next) => {
+        if (header.type === 'file') {
+          const filename = path.normalize(header.name);
+          if (filename === IMAGE_INDEX_FILE_V1) {
+            rootIndex = await OCI.streamToJson<Index>(stream);
+          } else if (filename === IMAGE_LAYOUT_FILE_V1) {
+            rootLayout = await OCI.streamToJson<ImageLayout>(stream);
+          } else if (filename.startsWith(path.join(IMAGE_BLOBS_DIR_V1, path.sep))) {
+            const blob = await OCI.extractBlob(stream);
+            const digest = `${filename.split(path.sep)[1]}:${filename.split(path.sep)[filename.split(path.sep).length - 1]}`;
+            if (OCI.isIndex(blob)) {
+              indexes[digest] = <Index>JSON.parse(blob);
+            } else if (OCI.isManifest(blob)) {
+              manifests[digest] = <Manifest>JSON.parse(blob);
+            } else if (OCI.isImage(blob)) {
+              images[digest] = <Image>JSON.parse(blob);
+            } else {
+              blobs[digest] = blob;
+            }
+          } else {
+            reject(new Error(`Invalid OCI archive: unexpected file ${filename}`));
+          }
+        }
+        stream.resume();
+        next();
+      });
+
+      tarex.on('finish', () => {
+        if (!rootIndex || !rootLayout) {
+          reject(new Error('Invalid OCI archive: missing index or layout'));
+        }
+        resolve({
+          root: {
+            index: rootIndex,
+            layout: rootLayout
+          },
+          indexes: indexes,
+          manifests: manifests,
+          images: images,
+          blobs: blobs
+        } as Archive);
+      });
+
+      tarex.on('error', error => {
+        reject(error);
+      });
+
+      fs.createReadStream(opts.file).pipe(gunzip()).pipe(tarex);
+    });
+  }
+
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  private static isIndex(blob: any): boolean {
+    try {
+      const index = <Index>JSON.parse(blob);
+      return index.mediaType === MEDIATYPE_IMAGE_INDEX_V1;
+    } catch {
+      return false;
+    }
+  }
+
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  private static isManifest(blob: any): boolean {
+    try {
+      const manifest = <Manifest>JSON.parse(blob);
+      return manifest.mediaType === MEDIATYPE_IMAGE_MANIFEST_V1 && manifest.layers.length > 0;
+    } catch {
+      return false;
+    }
+  }
+
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  private static isImage(blob: any): boolean {
+    try {
+      const image = <Image>JSON.parse(blob);
+      return image.rootfs.type !== '';
+    } catch {
+      return false;
+    }
+  }
+
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  private static extractBlob(stream: Readable): Promise<any> {
+    return new Promise<unknown>((resolve, reject) => {
+      const chunks: Buffer[] = [];
+      const dstream = stream.pipe(gunzip());
+      dstream.on('data', chunk => {
+        chunks.push(chunk);
+      });
+      dstream.on('end', () => {
+        resolve(Buffer.concat(chunks).toString('utf8'));
+      });
+      dstream.on('error', async error => {
+        reject(error);
+      });
+    });
+  }
+
+  private static async streamToJson<T>(stream: Readable): Promise<T> {
+    return new Promise<T>((resolve, reject) => {
+      const chunks: string[] = [];
+      let bytes = 0;
+      stream.on('data', chunk => {
+        bytes += chunk.length;
+        if (bytes <= 2 * 1024 * 1024) {
+          chunks.push(chunk.toString('utf8'));
+        } else {
+          reject(new Error('The data stream exceeds the size limit for JSON parsing.'));
+        }
+      });
+      stream.on('end', () => {
+        try {
+          resolve(JSON.parse(chunks.join('')));
+        } catch (error) {
+          reject(error);
+        }
+      });
+      stream.on('error', async error => {
+        reject(error);
+      });
+    });
+  }
+}
--- a/src/toolkit.ts
+++ b/src/toolkit.ts
@@ -15,8 +15,9 @@
 */

 import {Buildx} from './buildx/buildx';
+import {Build as BuildxBuild} from './buildx/build';
+import {Bake as BuildxBake} from './buildx/bake';
 import {Install as BuildxInstall} from './buildx/install';
-import {Bake} from './buildx/bake';
 import {Builder} from './buildx/builder';
 import {BuildKit} from './buildkit/buildkit';
 import {GitHub} from './github';
@@ -32,16 +33,18 @@ export interface ToolkitOpts {
 export class Toolkit {
  public github: GitHub;
  public buildx: Buildx;
+  public buildxBuild: BuildxBuild;
+  public buildxBake: BuildxBake;
  public buildxInstall: BuildxInstall;
-  public bake: Bake;
  public builder: Builder;
  public buildkit: BuildKit;

  constructor(opts: ToolkitOpts = {}) {
    this.github = new GitHub({token: opts.githubToken});
    this.buildx = new Buildx();
+    this.buildxBuild = new BuildxBuild({buildx: this.buildx});
+    this.buildxBake = new BuildxBake({buildx: this.buildx});
    this.buildxInstall = new BuildxInstall();
-    this.bake = new Bake({buildx: this.buildx});
    this.builder = new Builder({buildx: this.buildx});
    this.buildkit = new BuildKit({buildx: this.buildx});
  }
--- a/Show More
+++ b/Show More
				`@@ -0,0 +1 @@`
				{"Definition":"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","Targets":["dev"],"Refs":["vzxn0jxr44khtq7hc8drtzwjv"]}
				`@@ -0,0 +1 @@`
				`{"LocalPath":"/home/crazymax/github/docker/docker-alpine-s6","DockerfilePath":""}`
				`@@ -0,0 +1 @@`
				`{"LocalPath":"/home/crazy/foo/bar/https:/github.com/docker/actions-toolkit.git#:__tests__/fixtures","DockerfilePath":"/home/crazy/foo/bar/hello.Dockerfile"}`
				`@@ -0,0 +1 @@`
				`{"LocalPath":"/home/crazy/foo/bar/-","DockerfilePath":""}`
				`@@ -0,0 +1 @@`
				`{"LocalPath":"https://github.com/docker/actions-toolkit.git#:__tests__/fixtures","DockerfilePath":"hello.Dockerfile"}`
				`@@ -0,0 +1 @@`
				`{"Target":"dev","LocalPath":"/home/crazymax/github/docker_org/docker","DockerfilePath":"/home/crazymax/github/docker_org/docker/Dockerfile","GroupRef":"1fugf958r4peyg86h6scim5t5"}`
				`@@ -0,0 +1 @@`
				`{"LocalPath":"/home/crazy/hello","DockerfilePath":"/home/crazy/hello/-"}`
				`@@ -0,0 +1 @@`
				`{"Target":"default","LocalPath":"/home/crazymax/github/docker_org/compose/.dev/47231","DockerfilePath":"/home/crazymax/github/docker_org/compose/.dev/47231/bad/Dockerfile"}`