Skip to content

Tag the runner version to the tested image on push to main - #1267

Merged
int128 merged 1 commit into
mainfrom
tag-runner-version-on-main
Oct 29, 2026
Merged

int128 merged 1 commit into
mainfrom
tag-runner-version-on-main

Conversation

@int128

@int128 int128 commented Oct 29, 2026

Copy link
Copy Markdown
Member

Problem to solve

Currently, a version tag of the image is published by rebuilding the image when a release is created.
The released image may differ from the image tested by the E2E test, because the base image or packages may be changed between the builds.
Also, a change of the Dockerfile requires a manual release to be published.

This changes the release process as follows:

  • When a change is pushed into the main branch, add the runner version tag (e.g. 2.330.0) to the image tested by the E2E test, without rebuild.
  • Create a GitHub Release only when the runner version is updated.
  • Generate the build provenance attestation of the image, so that users can verify it by gh attestation verify.

Note that the version tag becomes mutable.
Users should pin the image digest, such as ghcr.io/quipper/actions-runner:2.330.0@sha256:....

Change

Tag the runner version to the tested image on push to main, and attest the build provenance.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@int128
int128 marked this pull request as ready for review October 29, 2026 05:14
@int128
int128 merged commit d67ab43 into main Oct 29, 2026
11 of 13 checks passed
@int128
int128 deleted the tag-runner-version-on-main branch October 29, 2026 05:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant