2025-04-22 07:26:04 +00:00
54 changed files with 4385 additions and 11875 deletions
--- a/.dockerignore
+++ b/.dockerignore
@ -1,12 +1,2 @@
 /coverage
-
-# Dependency directories
-node_modules/
-jspm_packages/
-
-# yarn v2
-.yarn/cache
-.yarn/unplugged
-.yarn/build-state.yml
-.yarn/install-state.gz
-.pnp.*
+/node_modules
--- a/.eslintignore
+++ b/.eslintignore
@ -1,3 +0,0 @@
-/dist/**
-/coverage/**
-/node_modules/**
--- a/.eslintrc.json
+++ b/.eslintrc.json
@ -1,19 +1,18 @@
 {
  "env": {
    "node": true,
-    "es6": true,
+    "es2021": true,
    "jest": true
  },
  "extends": [
    "eslint:recommended",
-    "plugin:@typescript-eslint/eslint-recommended",
    "plugin:@typescript-eslint/recommended",
    "plugin:jest/recommended",
    "plugin:prettier/recommended"
  ],
  "parser": "@typescript-eslint/parser",
  "parserOptions": {
-    "ecmaVersion": 2023,
+    "ecmaVersion": "latest",
    "sourceType": "module"
  },
  "plugins": [
--- a/.gitattributes
+++ b/.gitattributes
@ -1,4 +1,2 @@
-/.yarn/releases/** binary
-/.yarn/plugins/** binary
 /dist/** linguist-generated=true
 /lib/** linguist-generated=true
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@ -0,0 +1 @@
+*	@crazy-max
--- a/.github/CODE_OF_CONDUCT.md
+++ b/.github/CODE_OF_CONDUCT.md
@ -1,3 +0,0 @@
-# Code of conduct
-
- [Moby community guidelines](https://github.com/moby/moby/blob/master/CONTRIBUTING.md#moby-community-guidelines)
--- a/.github/ISSUE_TEMPLATE/bug.yml
+++ b/.github/ISSUE_TEMPLATE/bug.yml
@ -1,101 +0,0 @@
-# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/syntax-for-githubs-form-schema
-name: Bug Report
-description: Report a bug
-labels:
-  - status/triage
-
-body:
-  - type: markdown
-    attributes:
-      value: |
-        Thank you for taking the time to report a bug!
-        If this is a security issue please report it to the [Docker Security team](mailto:security@docker.com).
-        Before submitting a bug report, check out the [Troubleshooting doc](https://github.com/docker/build-push-action/blob/master/TROUBLESHOOTING.md).
-
-  - type: checkboxes
-    attributes:
-      label: Contributing guidelines
-      description: >
-        Make sure you've read the contributing guidelines before proceeding.
-      options:
-        - label: I've read the [contributing guidelines](https://github.com/docker/build-push-action/blob/master/.github/CONTRIBUTING.md) and wholeheartedly agree
-          required: true
-
-  - type: checkboxes
-    attributes:
-      label: "I've found a bug, and:"
-      description: |
-        Make sure that your request fulfills all of the following requirements.
-        If one requirement cannot be satisfied, explain in detail why.
-      options:
-        - label: The documentation does not mention anything about my problem
-        - label: There are no open or closed issues that are related to my problem
-
-  - type: textarea
-    attributes:
-      label: Description
-      description: >
-        Provide a brief description of the bug in 1-2 sentences.
-    validations:
-      required: true
-
-  - type: textarea
-    attributes:
-      label: Expected behaviour
-      description: >
-        Describe precisely what you'd expect to happen.
-    validations:
-      required: true
-
-  - type: textarea
-    attributes:
-      label: Actual behaviour
-      description: >
-        Describe precisely what is actually happening.
-    validations:
-      required: true
-
-  - type: input
-    attributes:
-      label: Repository URL
-      description: >
-        Enter the URL of the repository where you are experiencing the
-        issue. If your repository is private, provide a link to a minimal
-        repository that reproduces the issue.
-
-  - type: input
-    attributes:
-      label: Workflow run URL
-      description: >
-        Enter the URL of the GitHub Action workflow run, if public.
-
-  - type: textarea
-    attributes:
-      label: YAML workflow
-      description: |
-        Provide the YAML of the workflow that's causing the issue.
-        Make sure to remove any sensitive information.
-      render: yaml
-    validations:
-      required: true
-
-  - type: textarea
-    attributes:
-      label: Workflow logs
-      description: >
-        [Attach](https://docs.github.com/en/get-started/writing-on-github/working-with-advanced-formatting/attaching-files)
-        the [log file of your workflow run](https://docs.github.com/en/actions/managing-workflow-runs/using-workflow-run-logs#downloading-logs)
-        and make sure to remove any sensitive information.
-
-  - type: textarea
-    attributes:
-      label: BuildKit logs
-      description: >
-        If applicable, provide the [BuildKit container logs](https://docs.docker.com/build/ci/github-actions/configure-builder/#buildkit-container-logs)
-      render: text
-
-  - type: textarea
-    attributes:
-      label: Additional info
-      description: |
-        Provide any additional information that could be useful.
--- a/.github/ISSUE_TEMPLATE/bug_report.md
+++ b/.github/ISSUE_TEMPLATE/bug_report.md
@ -0,0 +1,37 @@
+---
+name: Bug report
+about: Create a report to help us improve
+---
+
+### Troubleshooting
+
+Before submitting a bug report please read the [Troubleshooting doc](https://github.com/docker/build-push-action/blob/master/TROUBLESHOOTING.md).
+
+### Behaviour
+
+#### Steps to reproduce this issue
+
+1.
+2.
+3.
+
+#### Expected behaviour
+
+> Tell us what should happen
+
+#### Actual behaviour
+
+> Tell us what happens instead
+
+### Configuration
+
+* Repository URL (if public): 
+* Build URL (if public): 
+
+```yml
+# paste your YAML workflow file here and remove sensitive data
+```
+
+### Logs
+
+> Download the [log file of your build](https://docs.github.com/en/actions/managing-workflow-runs/using-workflow-run-logs#downloading-logs) and [attach it](https://docs.github.com/en/github/managing-your-work-on-github/file-attachments-on-issues-and-pull-requests) to this issue.
--- a/.github/ISSUE_TEMPLATE/config.yml
+++ b/.github/ISSUE_TEMPLATE/config.yml
@ -1,9 +0,0 @@
-# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/configuring-issue-templates-for-your-repository#configuring-the-template-chooser
-blank_issues_enabled: true
-contact_links:
-  - name: Questions and Discussions
-    url: https://github.com/docker/build-push-action/discussions/new
-    about: Use Github Discussions to ask questions and/or open discussion topics.
-  - name: Documentation
-    url: https://docs.docker.com/build/ci/github-actions/
-    about: Read the documentation.
--- a/.github/ISSUE_TEMPLATE/feature.yml
+++ b/.github/ISSUE_TEMPLATE/feature.yml
@ -1,15 +0,0 @@
-# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/syntax-for-githubs-form-schema
-name: Feature request
-description: Missing functionality? Come tell us about it!
-labels:
-  - kind/enhancement
-  - status/triage
-
-body:
-  - type: textarea
-    id: description
-    attributes:
-      label: Description
-      description: What is the feature you want to see?
-    validations:
-      required: true
--- a/.github/SECURITY.md
+++ b/.github/SECURITY.md
@ -1,12 +0,0 @@
-# Reporting security issues
-
-The project maintainers take security seriously. If you discover a security
-issue, please bring it to their attention right away!
-
-**Please _DO NOT_ file a public issue**, instead send your report privately to
-[security@docker.com](mailto:security@docker.com).
-
-Security reports are greatly appreciated, and we will publicly thank you for it.
-We also like to send gifts&mdash;if you'd like Docker swag, make sure to let
-us know. We currently do not offer a paid security bounty program, but are not
-ruling it out in the future.
--- a/.github/SUPPORT.md
+++ b/.github/SUPPORT.md
@ -0,0 +1,31 @@
+# Support [![](https://isitmaintained.com/badge/resolution/docker/build-push-action.svg)](https://isitmaintained.com/project/docker/build-push-action)
+
+First, [be a good guy](https://github.com/kossnocorp/etiquette/blob/master/README.md).
+
+## Reporting an issue
+
+Please do a search in [open issues](https://github.com/docker/build-push-action/issues?utf8=%E2%9C%93&q=) to see if the issue or feature request has already been filed.
+
+If you find your issue already exists, make relevant comments and add your [reaction](https://github.com/blog/2119-add-reactions-to-pull-requests-issues-and-comments). Use a reaction in place of a "+1" comment.
+
+:+1: - upvote
+
+:-1: - downvote
+
+If you cannot find an existing issue that describes your bug or feature, submit an issue using the guidelines below.
+
+## Writing good bug reports and feature requests
+
+File a single issue per problem and feature request.
+
+* Do not enumerate multiple bugs or feature requests in the same issue.
+* Do not add your issue as a comment to an existing issue unless it's for the identical input. Many issues look similar, but have different causes.
+
+The more information you can provide, the more likely someone will be successful reproducing the issue and finding a fix.
+
+You are now ready to [create a new issue](https://github.com/docker/build-push-action/issues/new/choose)!
+
+## Closure policy
+
+* Issues that don't have the information requested above (when applicable) will be closed immediately and the poster directed to the support guidelines.
+* Issues that go a week without a response from original poster are subject to closure at our discretion.
--- a/.github/build-push-summary.png
+++ b/.github/build-push-summary.png
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -11,7 +11,6 @@ updates:
    directory: "/"
    schedule:
      interval: "daily"
-    versioning-strategy: "increase"
    allow:
      - dependency-type: "production"
    labels:
--- a/.github/workflows/.e2e-run.yml
+++ b/.github/workflows/.e2e-run.yml
@ -1,134 +0,0 @@
-# reusable workflow
-name: .e2e-run
-
-on:
-  workflow_call:
-    inputs:
-      id:
-        required: false
-        type: string
-      type:
-        required: true
-        type: string
-      name:
-        required: true
-        type: string
-      registry:
-        required: false
-        type: string
-      slug:
-        required: false
-        type: string
-      username_secret:
-        required: false
-        type: string
-      password_secret:
-        required: false
-        type: string
-
-env:
-  HARBOR_VERSION: v2.7.0
-  NEXUS_VERSION: 3.47.1
-  DISTRIBUTION_VERSION: 2.8.1
-
-jobs:
-  run:
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          -
-            buildx_version: edge
-            buildkit_image: moby/buildkit:latest
-          -
-            buildx_version: latest
-            buildkit_image: moby/buildkit:buildx-stable-1
-          -
-            buildx_version: https://github.com/docker/buildx.git#master
-            buildkit_image: moby/buildkit:master
-    steps:
-      -
-        name: Checkout
-        uses: actions/checkout@v4
-      -
-        name: Set up env
-        if: inputs.type == 'local'
-        run: |
-          cat ./.github/e2e/${{ inputs.id }}/env >> $GITHUB_ENV
-      -
-        name: Set up BuildKit config
-        run: |
-          touch /tmp/buildkitd.toml
-          if [ "${{ inputs.type }}" = "local" ]; then
-            echo -e "[registry.\"${{ env.REGISTRY_FQDN }}\"]\nhttp = true\ninsecure = true" > /tmp/buildkitd.toml
-          fi
-      -
-        name: Set up Docker daemon
-        if: inputs.type == 'local'
-        run: |
-          if [ ! -e /etc/docker/daemon.json ]; then
-            echo '{}' | sudo tee /etc/docker/daemon.json >/dev/null
-          fi
-          DOCKERD_CONFIG=$(jq '.+{"insecure-registries":["http://${{ env.REGISTRY_FQDN }}"]}' /etc/docker/daemon.json)
-          sudo tee /etc/docker/daemon.json <<<"$DOCKERD_CONFIG" >/dev/null
-          cat /etc/docker/daemon.json
-          sudo service docker restart
-      -
-        name: Install ${{ inputs.name }}
-        if: inputs.type == 'local'
-        run: |
-          sudo -E bash ./.github/e2e/${{ inputs.id }}/install.sh
-          sudo chown $(id -u):$(id -g) -R ~/.docker
-      -
-        name: Docker meta
-        id: meta
-        uses: docker/metadata-action@v5
-        with:
-          images: ${{ env.REGISTRY_SLUG || inputs.slug }}
-          tags: |
-            type=ref,event=branch,enable=${{ matrix.buildx_version == 'latest' && matrix.buildkit_image == 'moby/buildkit:buildx-stable-1' }}
-            type=ref,event=tag,enable=${{ matrix.buildx_version == 'latest' && matrix.buildkit_image == 'moby/buildkit:buildx-stable-1' }}
-            type=raw,gh-runid-${{ github.run_id }}
-      -
-        name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-      -
-        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-        with:
-          version: ${{ matrix.buildx_version }}
-          buildkitd-config: /tmp/buildkitd.toml
-          buildkitd-flags: --debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host
-          driver-opts: |
-            image=${{ matrix.buildkit_image }}
-            network=host
-      -
-        name: Login to Registry
-        if: github.event_name != 'pull_request' && (env.REGISTRY_USER || inputs.username_secret) != ''
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.REGISTRY_FQDN || inputs.registry }}
-          username: ${{ env.REGISTRY_USER || secrets[inputs.username_secret] }}
-          password: ${{ env.REGISTRY_PASSWORD || secrets[inputs.password_secret] }}
-      -
-        name: Build and push
-        uses: ./
-        with:
-          context: ./test
-          file: ./test/multi.Dockerfile
-          platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/ppc64le,linux/s390x
-          push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=registry,ref=${{ env.REGISTRY_SLUG || inputs.slug }}:master
-          cache-to: type=inline
-      -
-        name: Inspect image
-        run: |
-          docker pull ${{ env.REGISTRY_SLUG || inputs.slug }}:${{ steps.meta.outputs.version }}
-          docker image inspect ${{ env.REGISTRY_SLUG || inputs.slug }}:${{ steps.meta.outputs.version }}
-      -
-        name: Check manifest
-        run: |
-          docker buildx imagetools inspect ${{ env.REGISTRY_SLUG || inputs.slug }}:${{ steps.meta.outputs.version }} --format '{{json .}}'
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@ -1,11 +1,19 @@
 name: e2e

-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
 on:
  workflow_dispatch:
+    inputs:
+      buildx-version:
+        description: 'Buildx version or Git context'
+        default: 'latest'
+        required: false
+      buildkit-image:
+        description: 'BuildKit image'
+        default: 'moby/buildkit:buildx-stable-1'
+        required: false
+      tag:
+        description: 'Additional tag to push'
+        required: false
  schedule:
    - cron: '0 10 * * *'
  push:
@ -14,9 +22,16 @@ on:
    tags:
      - 'v*'

+env:
+  BUILDX_VERSION: latest
+  BUILDKIT_IMAGE: moby/buildkit:buildx-stable-1
+  HARBOR_VERSION: v2.7.0
+  NEXUS_VERSION: 3.47.1
+  DISTRIBUTION_VERSION: 2.8.1
+
 jobs:
  build:
-    uses: ./.github/workflows/.e2e-run.yml
+    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
@ -90,8 +105,8 @@ jobs:
            type: remote
          -
            name: Artifactory
-            registry: infradock.jfrog.io
-            slug: infradock.jfrog.io/test-ghaction/build-push-action
+            registry: buildkitghactiontests.jfrog.io
+            slug: buildkitghactiontests.jfrog.io/ghactiontest/test-docker-action
            username_secret: ARTIFACTORY_USERNAME
            password_secret: ARTIFACTORY_TOKEN
            type: remote
@ -103,12 +118,86 @@ jobs:
            name: Nexus
            id: nexus
            type: local
-    with:
-      id: ${{ matrix.id }}
-      type: ${{ matrix.type }}
-      name: ${{ matrix.name }}
-      registry: ${{ matrix.registry }}
-      slug: ${{ matrix.slug }}
-      username_secret: ${{ matrix.username_secret }}
-      password_secret: ${{ matrix.password_secret }}
-    secrets: inherit
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v3
+      -
+        name: Set up env
+        if: matrix.type == 'local'
+        run: |
+          cat ./.github/e2e/${{ matrix.id }}/env >> $GITHUB_ENV
+      -
+        name: Set up BuildKit config
+        run: |
+          touch /tmp/buildkitd.toml
+          if [ "${{ matrix.type }}" = "local" ]; then
+            echo -e "[registry.\"${{ env.REGISTRY_FQDN }}\"]\nhttp = true\ninsecure = true" > /tmp/buildkitd.toml
+          fi
+      -
+        name: Set up Docker daemon
+        if: matrix.type == 'local'
+        run: |
+          if [ ! -e /etc/docker/daemon.json ]; then
+            echo '{}' | tee /etc/docker/daemon.json >/dev/null
+          fi
+          DOCKERD_CONFIG=$(jq '.+{"insecure-registries":["http://${{ env.REGISTRY_FQDN }}"]}' /etc/docker/daemon.json)
+          sudo tee /etc/docker/daemon.json <<<"$DOCKERD_CONFIG" >/dev/null
+          sudo service docker restart
+      -
+        name: Install ${{ matrix.name }}
+        if: matrix.type == 'local'
+        run: |
+          sudo -E bash ./.github/e2e/${{ matrix.id }}/install.sh
+      -
+        name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v4
+        with:
+          images: ${{ env.REGISTRY_SLUG || matrix.slug }}
+          tags: |
+            type=ref,event=branch
+            type=ref,event=tag
+            type=raw,value=${{ inputs.tag }},enable=${{ inputs.tag != '' }}
+      -
+        name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
+      -
+        name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+        with:
+          version: ${{ inputs.buildx-version || env.BUILDX_VERSION }}
+          config: /tmp/buildkitd.toml
+          buildkitd-flags: --debug --allow-insecure-entitlement security.insecure --allow-insecure-entitlement network.host
+          driver-opts: |
+            image=${{ inputs.buildkit-image || env.BUILDKIT_IMAGE }}
+            network=host
+      -
+        name: Login to Registry
+        if: github.event_name != 'pull_request' && (env.REGISTRY_USER || matrix.username_secret) != ''
+        uses: docker/login-action@v2
+        with:
+          registry: ${{ env.REGISTRY_FQDN || matrix.registry }}
+          username: ${{ env.REGISTRY_USER || secrets[matrix.username_secret] }}
+          password: ${{ env.REGISTRY_PASSWORD || secrets[matrix.password_secret] }}
+      -
+        name: Build and push
+        uses: ./
+        with:
+          context: ./test
+          file: ./test/multi.Dockerfile
+          platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64,linux/ppc64le,linux/s390x
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=registry,ref=${{ env.REGISTRY_SLUG || matrix.slug }}:master
+          cache-to: type=inline
+      -
+        name: Inspect image
+        run: |
+          docker pull ${{ env.REGISTRY_SLUG || matrix.slug }}:${{ steps.meta.outputs.version }}
+          docker image inspect ${{ env.REGISTRY_SLUG || matrix.slug }}:${{ steps.meta.outputs.version }}
+      -
+        name: Check manifest
+        run: |
+          docker buildx imagetools inspect ${{ env.REGISTRY_SLUG || matrix.slug }}:${{ steps.meta.outputs.version }} --format '{{json .}}'
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@ -1,21 +0,0 @@
-name: publish
-
-on:
-  release:
-    types:
-      - published
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      id-token: write
-      packages: write
-    steps:
-      -
-        name: Checkout
-        uses: actions/checkout@v4
-      -
-        name: Publish
-        uses: actions/publish-immutable-action@v0.0.4
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@ -1,9 +1,5 @@
 name: test

-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
 on:
  push:
    branches:
@ -15,14 +11,16 @@ jobs:
  test:
    runs-on: ubuntu-latest
    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v3
      -
        name: Test
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v3
        with:
          targets: test
      -
        name: Upload coverage
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v3
        with:
-          files: ./coverage/clover.xml
-          token: ${{ secrets.CODECOV_TOKEN }}
+          file: ./coverage/clover.xml
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@ -1,9 +1,5 @@
 name: validate

-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
 on:
  push:
    branches:
@ -15,17 +11,16 @@ jobs:
  prepare:
    runs-on: ubuntu-latest
    outputs:
-      targets: ${{ steps.generate.outputs.targets }}
+      targets: ${{ steps.targets.outputs.matrix }}
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
      -
-        name: List targets
-        id: generate
-        uses: docker/bake-action/subaction/list-targets@v6
-        with:
-          target: validate
+        name: Targets matrix
+        id: targets
+        run: |
+          echo "matrix=$(docker buildx bake validate --print | jq -cr '.group.validate.targets')" >> $GITHUB_OUTPUT

  validate:
    runs-on: ubuntu-latest
@ -36,8 +31,11 @@ jobs:
      matrix:
        target: ${{ fromJson(needs.prepare.outputs.targets) }}
    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@v3
      -
        name: Validate
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v3
        with:
          targets: ${{ matrix.target }}
--- a/.gitignore
+++ b/.gitignore
@ -1,5 +1,7 @@
-# https://raw.githubusercontent.com/github/gitignore/main/Node.gitignore
+node_modules
+lib

+# Rest of the file pulled from https://github.com/github/gitignore/blob/master/Node.gitignore
 # Logs
 logs
 *.log
@ -7,7 +9,6 @@ npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
 lerna-debug.log*
-.pnpm-debug.log*

 # Diagnostic reports (https://nodejs.org/api/report.html)
 report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
@ -18,14 +19,34 @@ pids
 *.seed
 *.pid.lock

+# Directory for instrumented libs generated by jscoverage/JSCover
+lib-cov
+
 # Coverage directory used by tools like istanbul
 coverage
 *.lcov

+# nyc test coverage
+.nyc_output
+
+# Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
+.grunt
+
+# Bower dependency directory (https://bower.io/)
+bower_components
+
+# node-waf configuration
+.lock-wscript
+
+# Compiled binary addons (https://nodejs.org/api/addons.html)
+build/Release
+
 # Dependency directories
-node_modules/
 jspm_packages/

+# TypeScript v1 declaration files
+typings/
+
 # TypeScript cache
 *.tsbuildinfo

@ -35,19 +56,36 @@ jspm_packages/
 # Optional eslint cache
 .eslintcache

+# Optional REPL history
+.node_repl_history
+
+# Output of 'npm pack'
+*.tgz
+
 # Yarn Integrity file
 .yarn-integrity

-# dotenv environment variable files
+# dotenv environment variables file
 .env
-.env.development.local
-.env.test.local
-.env.production.local
-.env.local
+.env.test

-# yarn v2
-.yarn/cache
-.yarn/unplugged
-.yarn/build-state.yml
-.yarn/install-state.gz
-.pnp.*
+# parcel-bundler cache (https://parceljs.org/)
+.cache
+
+# next.js build output
+.next
+
+# nuxt.js build output
+.nuxt
+
+# vuepress build output
+.vuepress/dist
+
+# Serverless directories
+.serverless/
+
+# FuseBox cache
+.fusebox/
+
+# DynamoDB Local files
+.dynamodb/
--- a/.prettierignore
+++ b/.prettierignore
@ -1,6 +0,0 @@
-# Dependency directories
-node_modules/
-jspm_packages/
-
-# yarn v2
-.yarn/
--- a/.yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
+++ b/.yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
--- a/.yarnrc.yml
+++ b/.yarnrc.yml
@ -1,13 +0,0 @@
-logFilters:
-  - code: YN0013
-    level: discard
-  - code: YN0019
-    level: discard
-  - code: YN0076
-    level: discard
-
-nodeLinker: node-modules
-
-plugins:
-  - path: .yarn/plugins/@yarnpkg/plugin-interactive-tools.cjs
-    spec: "@yarnpkg/plugin-interactive-tools"
--- a/README.md
+++ b/README.md
@ -19,11 +19,21 @@ ___
  * [Git context](#git-context)
  * [Path context](#path-context)
 * [Examples](#examples)
-* [Summaries](#summaries)
+  * [Multi-platform image](https://docs.docker.com/build/ci/github-actions/multi-platform/)
+  * [Secrets](https://docs.docker.com/build/ci/github-actions/secrets/)
+  * [Push to multi-registries](https://docs.docker.com/build/ci/github-actions/push-multi-registries/)
+  * [Manage tags and labels](https://docs.docker.com/build/ci/github-actions/manage-tags-labels/)
+  * [Cache management](https://docs.docker.com/build/ci/github-actions/cache/)
+  * [Export to Docker](https://docs.docker.com/build/ci/github-actions/export-docker/)
+  * [Test before push](https://docs.docker.com/build/ci/github-actions/test-before-push/)
+  * [Local registry](https://docs.docker.com/build/ci/github-actions/local-registry/)
+  * [Share built image between jobs](https://docs.docker.com/build/ci/github-actions/share-image-jobs/)
+  * [Named contexts](https://docs.docker.com/build/ci/github-actions/named-contexts/)
+  * [Copy image between registries](https://docs.docker.com/build/ci/github-actions/copy-image-registries/)
+  * [Update Docker Hub repo description](https://docs.docker.com/build/ci/github-actions/update-dockerhub-desc/)
 * [Customizing](#customizing)
  * [inputs](#inputs)
  * [outputs](#outputs)
-  * [environment variables](#environment-variables)
 * [Troubleshooting](#troubleshooting)
 * [Contributing](#contributing)

@ -55,26 +65,28 @@ name: ci

 on:
  push:
+    branches:
+      - 'main'

 jobs:
  docker:
    runs-on: ubuntu-latest
    steps:
-      -
-        name: Login to Docker Hub
-        uses: docker/login-action@v3
-        with:
-          username: ${{ vars.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
      -
        name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v2
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v2
+      -
+        name: Login to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
      -
        name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v4
        with:
          push: true
          tags: user/app:latest
@ -92,15 +104,28 @@ expression `{{defaultContext}}`. Here we can use it to provide a subdirectory
 to the default Git context:

 ```yaml
+      -
+        # Setting up Docker Buildx with docker-container driver is required
+        # at the moment to be able to use a subdirectory with Git context
+        name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
      -
        name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v4
        with:
          context: "{{defaultContext}}:mysubdir"
          push: true
          tags: user/app:latest
 ```

+> **Warning**
+>
+> Subdirectory for Git context is available from [BuildKit v0.9.0](https://github.com/moby/buildkit/releases/tag/v0.9.0).
+> If you're using the `docker` builder (default if `setup-buildx-action` not used),
+> then BuildKit in Docker Engine will be used. As Docker Engine < v22.x.x embeds
+> Buildkit 0.8.2 at the moment, it does not support this feature. It's therefore
+> required to use the `setup-buildx-action` at the moment.
+
 Building from the current repository automatically uses the [GitHub Token](https://docs.github.com/en/actions/security-guides/automatic-token-authentication),
 so it does not need to be passed. If you want to authenticate against another
 private repository, you have to use a [secret](https://docs.docker.com/build/ci/github-actions/secrets)
@ -109,7 +134,7 @@ named `GIT_AUTH_TOKEN` to be able to authenticate against it with Buildx:
 ```yaml
      -
        name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v4
        with:
          push: true
          tags: user/app:latest
@ -124,6 +149,8 @@ name: ci

 on:
  push:
+    branches:
+      - 'main'

 jobs:
  docker:
@ -131,22 +158,22 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v4
-      -
-        name: Login to Docker Hub
-        uses: docker/login-action@v3
-        with:
-          username: ${{ vars.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
+        uses: actions/checkout@v3
      -
        name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v2
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v2
+      -
+        name: Login to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
      -
        name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v4
        with:
          context: .
          push: true
@ -162,54 +189,17 @@ jobs:
 * [Cache management](https://docs.docker.com/build/ci/github-actions/cache/)
 * [Export to Docker](https://docs.docker.com/build/ci/github-actions/export-docker/)
 * [Test before push](https://docs.docker.com/build/ci/github-actions/test-before-push/)
-* [Validating build configuration](https://docs.docker.com/build/ci/github-actions/checks/)
 * [Local registry](https://docs.docker.com/build/ci/github-actions/local-registry/)
 * [Share built image between jobs](https://docs.docker.com/build/ci/github-actions/share-image-jobs/)
 * [Named contexts](https://docs.docker.com/build/ci/github-actions/named-contexts/)
 * [Copy image between registries](https://docs.docker.com/build/ci/github-actions/copy-image-registries/)
 * [Update Docker Hub repo description](https://docs.docker.com/build/ci/github-actions/update-dockerhub-desc/)
-* [SBOM and provenance attestations](https://docs.docker.com/build/ci/github-actions/attestations/)
-* [Annotations](https://docs.docker.com/build/ci/github-actions/annotations/)
-* [Reproducible builds](https://docs.docker.com/build/ci/github-actions/reproducible-builds/)
-
-## Summaries
-
-This action generates a [job summary](https://github.blog/2022-05-09-supercharging-github-actions-with-job-summaries/)
-that provides a detailed overview of the build execution. The summary shows an
-overview of all the steps executed during the build, including the build inputs
-and eventual errors.
-
-![build-push-action job summary](./.github/build-push-summary.png)
-
-The summary also includes a link for downloading the build record with
-additional details about the build, including build stats, logs, outputs, and
-more. The build record can be imported to Docker Desktop for inspecting the
-build in greater detail.
-
-> [!WARNING]
->
-> If you're using the [`actions/download-artifact`](https://github.com/actions/download-artifact)
-> action in your workflow, you need to ignore the build record artifacts
-> if `name` and `pattern` inputs are not specified ([defaults to download all artifacts](https://github.com/actions/download-artifact?tab=readme-ov-file#download-all-artifacts) of the workflow),
-> otherwise the action will fail:
-> ```yaml
-> - uses: actions/download-artifact@v4
->   with:
->     pattern: "!*.dockerbuild"
-> ```
-> More info: https://github.com/actions/toolkit/pull/1874
-
-Summaries are enabled by default, but can be disabled with the
-`DOCKER_BUILD_SUMMARY` [environment variable](#environment-variables).
-
-For more information about summaries, refer to the
-[documentation](https://docs.docker.com/go/build-summary/).

 ## Customizing

 ### inputs

-The following inputs can be used as `step.with` keys:
+Following inputs can be used as `step.with` keys

 > `List` type is a newline-delimited string
 > ```yaml
@ -227,14 +217,12 @@ The following inputs can be used as `step.with` keys:
 |--------------------|-------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
 | `add-hosts`        | List/CSV    | List of [customs host-to-IP mapping](https://docs.docker.com/engine/reference/commandline/build/#add-entries-to-container-hosts-file---add-host) (e.g., `docker:10.180.0.1`)      |
 | `allow`            | List/CSV    | List of [extra privileged entitlement](https://docs.docker.com/engine/reference/commandline/buildx_build/#allow) (e.g., `network.host,security.insecure`)                         |
-| `annotations`      | List        | List of annotation to set to the image                                                                                                                                            |
 | `attests`          | List        | List of [attestation](https://docs.docker.com/build/attestations/) parameters (e.g., `type=sbom,generator=image`)                                                                 | 
 | `builder`          | String      | Builder instance (see [setup-buildx](https://github.com/docker/setup-buildx-action) action)                                                                                       |
 | `build-args`       | List        | List of [build-time variables](https://docs.docker.com/engine/reference/commandline/buildx_build/#build-arg)                                                                      |
 | `build-contexts`   | List        | List of additional [build contexts](https://docs.docker.com/engine/reference/commandline/buildx_build/#build-context) (e.g., `name=path`)                                         |
 | `cache-from`       | List        | List of [external cache sources](https://docs.docker.com/engine/reference/commandline/buildx_build/#cache-from) (e.g., `type=local,src=path/to/dir`)                              |
 | `cache-to`         | List        | List of [cache export destinations](https://docs.docker.com/engine/reference/commandline/buildx_build/#cache-to) (e.g., `type=local,dest=path/to/dir`)                            |
-| `call`             | String      | Set [method for evaluating build](https://docs.docker.com/reference/cli/docker/buildx/build/#call) (e.g., `check`)                                                                |
 | `cgroup-parent`    | String      | Optional [parent cgroup](https://docs.docker.com/engine/reference/commandline/build/#use-a-custom-parent-cgroup---cgroup-parent) for the container used in the build              |
 | `context`          | String      | Build's context is the set of files located in the specified [`PATH` or `URL`](https://docs.docker.com/engine/reference/commandline/build/) (default [Git context](#git-context)) |
 | `file`             | String      | Path to the Dockerfile. (default `{context}/Dockerfile`)                                                                                                                          |
@ -243,14 +231,13 @@ The following inputs can be used as `step.with` keys:
 | `network`          | String      | Set the networking mode for the `RUN` instructions during build                                                                                                                   |
 | `no-cache`         | Bool        | Do not use cache when building the image (default `false`)                                                                                                                        |
 | `no-cache-filters` | List/CSV    | Do not cache specified stages                                                                                                                                                     |
-| `outputs`          | List        | List of [output destinations](https://docs.docker.com/engine/reference/commandline/buildx_build/#output) (format: `type=local,dest=path`)                                         |
+| `outputs`¹         | List        | List of [output destinations](https://docs.docker.com/engine/reference/commandline/buildx_build/#output) (format: `type=local,dest=path`)                                         |
 | `platforms`        | List/CSV    | List of [target platforms](https://docs.docker.com/engine/reference/commandline/buildx_build/#platform) for build                                                                 |
 | `provenance`       | Bool/String | Generate [provenance](https://docs.docker.com/build/attestations/slsa-provenance/) attestation for the build (shorthand for `--attest=type=provenance`)                           |
 | `pull`             | Bool        | Always attempt to pull all referenced images (default `false`)                                                                                                                    |
 | `push`             | Bool        | [Push](https://docs.docker.com/engine/reference/commandline/buildx_build/#push) is a shorthand for `--output=type=registry` (default `false`)                                     |
 | `sbom`             | Bool/String | Generate [SBOM](https://docs.docker.com/build/attestations/sbom/) attestation for the build (shorthand for `--attest=type=sbom`)                                                  |
 | `secrets`          | List        | List of [secrets](https://docs.docker.com/engine/reference/commandline/buildx_build/#secret) to expose to the build (e.g., `key=string`, `GIT_AUTH_TOKEN=mytoken`)                |
-| `secret-envs`      | List/CSV    | List of [secret env vars](https://docs.docker.com/engine/reference/commandline/buildx_build/#secret) to expose to the build (e.g., `key=envname`, `MY_SECRET=MY_ENV_VAR`)         |
 | `secret-files`     | List        | List of [secret files](https://docs.docker.com/engine/reference/commandline/buildx_build/#secret) to expose to the build (e.g., `key=filename`, `MY_SECRET=./secret.txt`)         |
 | `shm-size`         | String      | Size of [`/dev/shm`](https://docs.docker.com/engine/reference/commandline/buildx_build/#shm-size) (e.g., `2g`)                                                                    |
 | `ssh`              | List        | List of [SSH agent socket or keys](https://docs.docker.com/engine/reference/commandline/buildx_build/#ssh) to expose to the build                                                 |
@ -259,9 +246,13 @@ The following inputs can be used as `step.with` keys:
 | `ulimit`           | List        | [Ulimit](https://docs.docker.com/engine/reference/commandline/buildx_build/#ulimit) options (e.g., `nofile=1024:1024`)                                                            |
 | `github-token`     | String      | GitHub Token used to authenticate against a repository for [Git context](#git-context) (default `${{ github.token }}`)                                                            |

+> **Note**
+>
+> * ¹ multiple `outputs` are [not yet supported](https://github.com/moby/buildkit/issues/1555)
+
 ### outputs

-The following outputs are available:
+Following outputs are available

 | Name       | Type    | Description           |
 |------------|---------|-----------------------|
@ -269,15 +260,6 @@ The following outputs are available:
 | `digest`   | String  | Image digest          |
 | `metadata` | JSON    | Build result metadata |

-### environment variables
-
-| Name                                 | Type   | Default | Description                                                                                                                                                                                                                                                        |
-|--------------------------------------|--------|---------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-| `DOCKER_BUILD_CHECKS_ANNOTATIONS`    | Bool   | `true`  | If `false`, GitHub annotations are not generated for [build checks](https://docs.docker.com/build/checks/)                                                                                                                                                         |
-| `DOCKER_BUILD_SUMMARY`               | Bool   | `true`  | If `false`, [build summary](https://docs.docker.com/build/ci/github-actions/build-summary/) generation is disabled                                                                                                                                                 |
-| `DOCKER_BUILD_RECORD_UPLOAD`         | Bool   | `true`  | If `false`, build record upload as [GitHub artifact](https://docs.github.com/en/actions/using-workflows/storing-workflow-data-as-artifacts) is disabled                                                                                                            |
-| `DOCKER_BUILD_RECORD_RETENTION_DAYS` | Number |         | Duration after which build record artifact will expire in days. Defaults to repository/org [retention settings](https://docs.github.com/en/actions/learn-github-actions/usage-limits-billing-and-administration#artifact-and-log-retention-policy) if unset or `0` |
-
 ## Troubleshooting

 See [TROUBLESHOOTING.md](TROUBLESHOOTING.md)
--- a/TROUBLESHOOTING.md
+++ b/TROUBLESHOOTING.md
@ -44,13 +44,13 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v3
      -
        name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v2
      -
        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v2
        with:
          buildkitd-flags: --debug
      -
@ -58,7 +58,7 @@ jobs:
        uses: crazy-max/ghaction-setup-containerd@v2
      -
        name: Build Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v4
        with:
          context: .
          platforms: linux/amd64,linux/arm64
@ -111,7 +111,7 @@ to generate sanitized tags:
    tags: latest

 - name: Build and push
-  uses: docker/build-push-action@v6
+  uses: docker/build-push-action@v4
  with:
    context: .
    push: true
@ -129,7 +129,7 @@ Or a dedicated step to sanitize the slug:
    script: return 'ghcr.io/${{ github.repository }}'.toLowerCase()

 - name: Build and push
-  uses: docker/build-push-action@v6
+  uses: docker/build-push-action@v4
  with:
    context: .
    push: true
--- a/tests/context.test.ts
+++ b/tests/context.test.ts
@ -1,16 +1,13 @@
 import {beforeEach, describe, expect, jest, test} from '@jest/globals';
 import * as fs from 'fs';
 import * as path from 'path';
-
 import {Builder} from '@docker/actions-toolkit/lib/buildx/builder';
 import {Buildx} from '@docker/actions-toolkit/lib/buildx/buildx';
-import {Build} from '@docker/actions-toolkit/lib/buildx/build';
 import {Context} from '@docker/actions-toolkit/lib/context';
 import {Docker} from '@docker/actions-toolkit/lib/docker/docker';
 import {GitHub} from '@docker/actions-toolkit/lib/github';
 import {Toolkit} from '@docker/actions-toolkit/lib/toolkit';
-
-import {BuilderInfo} from '@docker/actions-toolkit/lib/types/buildx/builder';
+import {BuilderInfo} from '@docker/actions-toolkit/lib/types/builder';
 import {GitHubRepo} from '@docker/actions-toolkit/lib/types/github';

 import * as context from '../src/context';
@ -38,16 +35,6 @@ jest.spyOn(Docker, 'isAvailable').mockImplementation(async (): Promise<boolean>
  return true;
 });

-const metadataJson = path.join(tmpDir, 'metadata.json');
-jest.spyOn(Build.prototype, 'getMetadataFilePath').mockImplementation((): string => {
-  return metadataJson;
-});
-
-const imageIDFilePath = path.join(tmpDir, 'iidfile.txt');
-jest.spyOn(Build.prototype, 'getImageIDFilePath').mockImplementation((): string => {
-  return imageIDFilePath;
-});
-
 jest.spyOn(Builder.prototype, 'inspect').mockImplementation(async (): Promise<BuilderInfo> => {
  return {
    name: 'builder2',
@ -91,7 +78,7 @@ describe('getArgs', () => {
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        '.'
      ]
    ],
@ -114,7 +101,7 @@ ccc"`],
        '--build-arg', 'MY_ARG=val1,val2,val3',
        '--build-arg', 'ARG=val',
        '--build-arg', `MULTILINE=aaaa\nbbbb\nccc`,
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        'https://github.com/docker/build-push-action.git#refs/heads/master'
      ]
    ],
@ -130,7 +117,7 @@ ccc"`],
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        '--tag', 'name/app:7.4',
        '--tag', 'name/app:latest',
        'https://github.com/docker/build-push-action.git#refs/heads/master'
@ -185,7 +172,7 @@ ccc"`],
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        '.'
      ]
    ],
@ -202,7 +189,7 @@ ccc"`],
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        '--secret', `id=GIT_AUTH_TOKEN,src=${tmpName}`,
        '.'
      ]
@ -243,7 +230,7 @@ ccc"`],
      [
        'build',
        '--file', './test/Dockerfile',
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        '--platform', 'linux/amd64,linux/arm64',
        '--secret', `id=GIT_AUTH_TOKEN,src=${tmpName}`,
        '--builder', 'builder-git-context-2',
@ -277,7 +264,7 @@ ccc"`],
      [
        'build',
        '--file', './test/Dockerfile',
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        '--platform', 'linux/amd64,linux/arm64',
        '--secret', `id=GIT_AUTH_TOKEN,src=${tmpName}`,
        '--secret', `id=MYSECRET,src=${tmpName}`,
@ -314,7 +301,7 @@ ccc`],
      [
        'build',
        '--file', './test/Dockerfile',
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        '--platform', 'linux/amd64,linux/arm64',
        '--secret', `id=GIT_AUTH_TOKEN,src=${tmpName}`,
        '--secret', `id=MYSECRET,src=${tmpName}`,
@ -343,7 +330,7 @@ ccc`],
      [
        'build',
        '--file', './test/Dockerfile',
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        '--secret', `id=MY_SECRET,src=${tmpName}`,
        '--builder', 'builder-git-context-2',
        '--network', 'host',
@ -390,8 +377,8 @@ ccc`],
        '--add-host', 'docker:10.180.0.1',
        '--add-host', 'foo:10.0.0.1',
        '--file', './test/Dockerfile',
-        '--iidfile', imageIDFilePath,
-        '--metadata-file', metadataJson,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
+        '--metadata-file', path.join(tmpDir, 'metadata-file'),
        '--network', 'host',
        '--push',
        '.'
@ -419,11 +406,11 @@ nproc=3`],
        '--add-host', 'foo:10.0.0.1',
        '--cgroup-parent', 'foo',
        '--file', './test/Dockerfile',
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        '--shm-size', '2g',
        '--ulimit', 'nofile=1024:1024',
        '--ulimit', 'nproc=3',
-        '--metadata-file', metadataJson,
+        '--metadata-file', path.join(tmpDir, 'metadata-file'),
        '.'
      ]
    ],
@ -439,8 +426,8 @@ nproc=3`],
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
-        '--metadata-file', metadataJson,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
+        '--metadata-file', path.join(tmpDir, 'metadata-file'),
        'https://github.com/docker/build-push-action.git#refs/heads/master:docker'
      ]
    ],
@ -457,9 +444,9 @@ nproc=3`],
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        '--secret', `id=GIT_AUTH_TOKEN,src=${tmpName}`,
-        '--metadata-file', metadataJson,
+        '--metadata-file', path.join(tmpDir, 'metadata-file'),
        'https://github.com/docker/build-push-action.git#refs/heads/master:subdir'
      ]
    ],
@ -476,8 +463,8 @@ nproc=3`],
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
-        '--metadata-file', metadataJson,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
+        '--metadata-file', path.join(tmpDir, 'metadata-file'),
        '.'
      ]
    ],
@ -493,9 +480,9 @@ nproc=3`],
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
-        '--attest', `type=provenance,mode=min,inline-only=true,builder-id=https://github.com/docker/build-push-action/actions/runs/123456789/attempts/1`,
-        '--metadata-file', metadataJson,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
+        "--provenance", `mode=min,inline-only=true,builder-id=https://github.com/docker/build-push-action/actions/runs/123456789`,
+        '--metadata-file', path.join(tmpDir, 'metadata-file'),
        '.'
      ]
    ],
@ -512,9 +499,9 @@ nproc=3`],
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
-        '--attest', `type=provenance,builder-id=https://github.com/docker/build-push-action/actions/runs/123456789/attempts/1`,
-        '--metadata-file', metadataJson,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
+        "--provenance", `builder-id=https://github.com/docker/build-push-action/actions/runs/123456789`,
+        '--metadata-file', path.join(tmpDir, 'metadata-file'),
        '.'
      ]
    ],
@ -531,9 +518,9 @@ nproc=3`],
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
-        '--attest', `type=provenance,mode=max,builder-id=https://github.com/docker/build-push-action/actions/runs/123456789/attempts/1`,
-        '--metadata-file', metadataJson,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
+        "--provenance", `mode=max,builder-id=https://github.com/docker/build-push-action/actions/runs/123456789`,
+        '--metadata-file', path.join(tmpDir, 'metadata-file'),
        '.'
      ]
    ],
@ -550,9 +537,9 @@ nproc=3`],
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
-        '--attest', 'type=provenance,disabled=true',
-        '--metadata-file', metadataJson,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
+        "--provenance", 'false',
+        '--metadata-file', path.join(tmpDir, 'metadata-file'),
        '.'
      ]
    ],
@ -569,9 +556,9 @@ nproc=3`],
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
-        '--attest', 'type=provenance,builder-id=foo',
-        '--metadata-file', metadataJson,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
+        "--provenance", 'builder-id=foo',
+        '--metadata-file', path.join(tmpDir, 'metadata-file'),
        '.'
      ]
    ],
@ -588,9 +575,9 @@ nproc=3`],
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        "--output", 'type=docker',
-        '--metadata-file', metadataJson,
+        '--metadata-file', path.join(tmpDir, 'metadata-file'),
        '.'
      ]
    ],
@ -606,9 +593,9 @@ nproc=3`],
      ]),
      [
        'build',
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        '--load',
-        '--metadata-file', metadataJson,
+        '--metadata-file', path.join(tmpDir, 'metadata-file'),
        '.'
      ]
    ],
@ -626,176 +613,9 @@ nproc=3`],
      [
        'build',
        '--build-arg', 'FOO=bar#baz',
-        '--iidfile', imageIDFilePath,
+        '--iidfile', path.join(tmpDir, 'iidfile'),
        '--load',
-        '--metadata-file', metadataJson,
-        '.'
-      ]
-    ],
-    [
-      26,
-      '0.10.0',
-      new Map<string, string>([
-        ['context', '.'],
-        ['no-cache', 'false'],
-        ['load', 'true'],
-        ['push', 'false'],
-        ['pull', 'false'],
-        ['secret-envs', `MY_SECRET=MY_SECRET_ENV
-ANOTHER_SECRET=ANOTHER_SECRET_ENV`]
-      ]),
-      [
-        'build',
-        '--secret', 'id=MY_SECRET,env=MY_SECRET_ENV',
-        '--secret', 'id=ANOTHER_SECRET,env=ANOTHER_SECRET_ENV',
-        '--iidfile', imageIDFilePath,
-        '--load',
-        '--metadata-file', metadataJson,
-        '.'
-      ]
-    ],
-    [
-      27,
-      '0.10.0',
-      new Map<string, string>([
-        ['context', '.'],
-        ['no-cache', 'false'],
-        ['load', 'true'],
-        ['push', 'false'],
-        ['pull', 'false'],
-        ['secret-envs', 'MY_SECRET=MY_SECRET_ENV,ANOTHER_SECRET=ANOTHER_SECRET_ENV']
-      ]),
-      [
-        'build',
-        '--secret', 'id=MY_SECRET,env=MY_SECRET_ENV',
-        '--secret', 'id=ANOTHER_SECRET,env=ANOTHER_SECRET_ENV',
-        '--iidfile', imageIDFilePath,
-        '--load',
-        '--metadata-file', metadataJson,
-        '.'
-      ]
-    ],
-    [
-      28,
-      '0.11.0',
-      new Map<string, string>([
-        ['context', '.'],
-        ['annotations', 'example1=www\nindex:example2=xxx\nmanifest:example3=yyy\nmanifest-descriptor[linux/amd64]:example4=zzz'],
-        ['outputs', 'type=local,dest=./release-out'],
-        ['load', 'false'],
-        ['no-cache', 'false'],
-        ['push', 'false'],
-        ['pull', 'false'],
-      ]),
-      [
-        'build',
-        '--output', 'type=local,dest=./release-out',
-        '--attest', `type=provenance,mode=min,inline-only=true,builder-id=https://github.com/docker/build-push-action/actions/runs/123456789/attempts/1`,
-        '--metadata-file', metadataJson,
-        '.'
-      ]
-    ],
-    [
-      29,
-      '0.12.0',
-      new Map<string, string>([
-        ['context', '.'],
-        ['annotations', 'example1=www\nindex:example2=xxx\nmanifest:example3=yyy\nmanifest-descriptor[linux/amd64]:example4=zzz'],
-        ['outputs', 'type=local,dest=./release-out'],
-        ['load', 'false'],
-        ['no-cache', 'false'],
-        ['push', 'false'],
-        ['pull', 'false'],
-      ]),
-      [
-        'build',
-        '--annotation', 'example1=www',
-        '--annotation', 'index:example2=xxx',
-        '--annotation', 'manifest:example3=yyy',
-        '--annotation', 'manifest-descriptor[linux/amd64]:example4=zzz',
-        '--output', 'type=local,dest=./release-out',
-        '--attest', `type=provenance,mode=min,inline-only=true,builder-id=https://github.com/docker/build-push-action/actions/runs/123456789/attempts/1`,
-        '--metadata-file', metadataJson,
-        '.'
-      ]
-    ],
-    [
-      30,
-      '0.12.0',
-      new Map<string, string>([
-        ['context', '.'],
-        ['outputs', `type=image,"name=localhost:5000/name/app:latest,localhost:5000/name/app:foo",push-by-digest=true,name-canonical=true,push=true`],
-        ['load', 'false'],
-        ['no-cache', 'false'],
-        ['push', 'false'],
-        ['pull', 'false'],
-      ]),
-      [
-        'build',
-        '--iidfile', imageIDFilePath,
-        "--output", `type=image,"name=localhost:5000/name/app:latest,localhost:5000/name/app:foo",push-by-digest=true,name-canonical=true,push=true`,
-        '--attest', `type=provenance,mode=min,inline-only=true,builder-id=https://github.com/docker/build-push-action/actions/runs/123456789/attempts/1`,
-        '--metadata-file', metadataJson,
-        '.'
-      ]
-    ],
-    [
-      31,
-      '0.13.1',
-      new Map<string, string>([
-        ['context', '.'],
-        ['load', 'false'],
-        ['no-cache', 'false'],
-        ['push', 'false'],
-        ['pull', 'false'],
-        ['provenance', 'mode=max'],
-        ['sbom', 'true'],
-      ]),
-      [
-        'build',
-        '--iidfile', imageIDFilePath,
-        '--attest', `type=provenance,mode=max,builder-id=https://github.com/docker/build-push-action/actions/runs/123456789/attempts/1`,
-        '--attest', `type=sbom,disabled=false`,
-        '--metadata-file', metadataJson,
-        '.'
-      ]
-    ],
-    [
-      32,
-      '0.13.1',
-      new Map<string, string>([
-        ['context', '.'],
-        ['load', 'false'],
-        ['no-cache', 'false'],
-        ['push', 'false'],
-        ['pull', 'false'],
-        ['attests', 'type=provenance,mode=min'],
-        ['provenance', 'mode=max'],
-      ]),
-      [
-        'build',
-        '--iidfile', imageIDFilePath,
-        '--attest', `type=provenance,mode=max,builder-id=https://github.com/docker/build-push-action/actions/runs/123456789/attempts/1`,
-        '--metadata-file', metadataJson,
-        '.'
-      ]
-    ],
-    [
-      33,
-      '0.13.1',
-      new Map<string, string>([
-        ['context', '.'],
-        ['load', 'false'],
-        ['no-cache', 'false'],
-        ['push', 'false'],
-        ['pull', 'false'],
-        ['attests', 'type=provenance,mode=min'],
-      ]),
-      [
-        'build',
-        '--iidfile', imageIDFilePath,
-        '--attest', `type=provenance,mode=min,builder-id=https://github.com/docker/build-push-action/actions/runs/123456789/attempts/1`,
-        '--metadata-file', metadataJson,
+        '--metadata-file', path.join(tmpDir, 'metadata-file'),
        '.'
      ]
    ],
--- a/action.yml
+++ b/action.yml
@ -13,9 +13,6 @@ inputs:
  allow:
    description: "List of extra privileged entitlement (e.g., network.host,security.insecure)"
    required: false
-  annotations:
-    description: "List of annotation to set to the image"
-    required: false
  attests:
    description: "List of attestation parameters (e.g., type=sbom,generator=image)"
    required: false
@ -34,9 +31,6 @@ inputs:
  cache-to:
    description: "List of cache export destinations for buildx (e.g., user/app:cache, type=local,dest=path/to/dir)"
    required: false
-  call:
-    description: "Set method for evaluating build (e.g., check)"
-    required: false
  cgroup-parent:
    description: "Optional parent cgroup for the container used in the build"
    required: false
@ -86,9 +80,6 @@ inputs:
  secrets:
    description: "List of secrets to expose to the build (e.g., key=string, GIT_AUTH_TOKEN=mytoken)"
    required: false
-  secret-envs:
-    description: "List of secret env vars to expose to the build (e.g., key=envname, MY_SECRET=MY_ENV_VAR)"
-    required: false
  secret-files:
    description: "List of secret files to expose to the build (e.g., key=filename, MY_SECRET=./secret.txt)"
    required: false
@ -121,6 +112,6 @@ outputs:
    description: 'Build result metadata'

 runs:
-  using: 'node20'
+  using: 'node16'
  main: 'dist/index.js'
  post: 'dist/index.js'
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@ -1,20 +1,15 @@
 # syntax=docker/dockerfile:1

-ARG NODE_VERSION=20
+ARG NODE_VERSION=16
+ARG DOCKER_VERSION=20.10.13
+ARG BUILDX_VERSION=0.8.0

 FROM node:${NODE_VERSION}-alpine AS base
 RUN apk add --no-cache cpio findutils git
 WORKDIR /src
-RUN --mount=type=bind,target=.,rw \
-  --mount=type=cache,target=/src/.yarn/cache <<EOT
-  corepack enable
-  yarn --version
-  yarn config set --home enableTelemetry 0
-EOT

 FROM base AS deps
 RUN --mount=type=bind,target=.,rw \
-  --mount=type=cache,target=/src/.yarn/cache \
  --mount=type=cache,target=/src/node_modules \
  yarn install && mkdir /vendor && cp yarn.lock /vendor

@ -23,19 +18,18 @@ COPY --from=deps /vendor /

 FROM deps AS vendor-validate
 RUN --mount=type=bind,target=.,rw <<EOT
-  set -e
-  git add -A
-  cp -rf /vendor/* .
-  if [ -n "$(git status --porcelain -- yarn.lock)" ]; then
-    echo >&2 'ERROR: Vendor result differs. Please vendor your package with "docker buildx bake vendor-update"'
-    git status --porcelain -- yarn.lock
-    exit 1
-  fi
+set -e
+git add -A
+cp -rf /vendor/* .
+if [ -n "$(git status --porcelain -- yarn.lock)" ]; then
+  echo >&2 'ERROR: Vendor result differs. Please vendor your package with "docker buildx bake vendor-update"'
+  git status --porcelain -- yarn.lock
+  exit 1
+fi
 EOT

 FROM deps AS build
 RUN --mount=type=bind,target=.,rw \
-  --mount=type=cache,target=/src/.yarn/cache \
  --mount=type=cache,target=/src/node_modules \
  yarn run build && mkdir /out && cp -Rf dist /out/

@ -44,37 +38,39 @@ COPY --from=build /out /

 FROM build AS build-validate
 RUN --mount=type=bind,target=.,rw <<EOT
-  set -e
-  git add -A
-  cp -rf /out/* .
-  if [ -n "$(git status --porcelain -- dist)" ]; then
-    echo >&2 'ERROR: Build result differs. Please build first with "docker buildx bake build"'
-    git status --porcelain -- dist
-    exit 1
-  fi
+set -e
+git add -A
+cp -rf /out/* .
+if [ -n "$(git status --porcelain -- dist)" ]; then
+  echo >&2 'ERROR: Build result differs. Please build first with "docker buildx bake build"'
+  git status --porcelain -- dist
+  exit 1
+fi
 EOT

 FROM deps AS format
 RUN --mount=type=bind,target=.,rw \
-  --mount=type=cache,target=/src/.yarn/cache \
  --mount=type=cache,target=/src/node_modules \
  yarn run format \
-  && mkdir /out && find . -name '*.ts' -not -path './node_modules/*' -not -path './.yarn/*' | cpio -pdm /out
+  && mkdir /out && find . -name '*.ts' -not -path './node_modules/*' | cpio -pdm /out

 FROM scratch AS format-update
 COPY --from=format /out /

 FROM deps AS lint
 RUN --mount=type=bind,target=.,rw \
-  --mount=type=cache,target=/src/.yarn/cache \
  --mount=type=cache,target=/src/node_modules \
  yarn run lint

+FROM docker:${DOCKER_VERSION} as docker
+FROM docker/buildx-bin:${BUILDX_VERSION} as buildx
+
 FROM deps AS test
 RUN --mount=type=bind,target=.,rw \
-  --mount=type=cache,target=/src/.yarn/cache \
  --mount=type=cache,target=/src/node_modules \
-  yarn run test --coverage --coverageDirectory=/tmp/coverage
+  --mount=type=bind,from=docker,source=/usr/local/bin/docker,target=/usr/bin/docker \
+  --mount=type=bind,from=buildx,source=/buildx,target=/usr/libexec/docker/cli-plugins/docker-buildx \
+  yarn run test --coverageDirectory=/tmp/coverage

 FROM scratch AS test-coverage
 COPY --from=test /tmp/coverage /
--- a/dist/index.js
+++ b/dist/index.js
--- a/dist/index.js.map
+++ b/dist/index.js.map
--- a/dist/licenses.txt
+++ b/dist/licenses.txt
--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@ -1,15 +1,9 @@
-target "_common" {
-  args = {
-    BUILDKIT_CONTEXT_KEEP_GIT_DIR = 1
-  }
-}
-
 group "default" {
  targets = ["build"]
 }

 group "pre-checkin" {
-  targets = ["vendor", "format", "build"]
+  targets = ["vendor-update", "format", "build"]
 }

 group "validate" {
@ -17,49 +11,42 @@ group "validate" {
 }

 target "build" {
-  inherits = ["_common"]
  dockerfile = "dev.Dockerfile"
  target = "build-update"
  output = ["."]
 }

 target "build-validate" {
-  inherits = ["_common"]
  dockerfile = "dev.Dockerfile"
  target = "build-validate"
  output = ["type=cacheonly"]
 }

 target "format" {
-  inherits = ["_common"]
  dockerfile = "dev.Dockerfile"
  target = "format-update"
  output = ["."]
 }

 target "lint" {
-  inherits = ["_common"]
  dockerfile = "dev.Dockerfile"
  target = "lint"
  output = ["type=cacheonly"]
 }

-target "vendor" {
-  inherits = ["_common"]
+target "vendor-update" {
  dockerfile = "dev.Dockerfile"
  target = "vendor-update"
  output = ["."]
 }

 target "vendor-validate" {
-  inherits = ["_common"]
  dockerfile = "dev.Dockerfile"
  target = "vendor-validate"
  output = ["type=cacheonly"]
 }

 target "test" {
-  inherits = ["_common"]
  dockerfile = "dev.Dockerfile"
  target = "test-coverage"
  output = ["./coverage"]
--- a/docs/advanced/cache.md
+++ b/docs/advanced/cache.md
@ -0,0 +1,3 @@
+# Cache
+
+This page has moved to [Docker Docs website](https://docs.docker.com/build/ci/github-actions/cache/)
--- a/docs/advanced/copy-between-registries.md
+++ b/docs/advanced/copy-between-registries.md
@ -0,0 +1,3 @@
+# Copy images between registries
+
+This page has moved to [Docker Docs website](https://docs.docker.com/build/ci/github-actions/copy-image-registries/)
--- a/docs/advanced/dockerhub-desc.md
+++ b/docs/advanced/dockerhub-desc.md
@ -0,0 +1,3 @@
+# Update Docker Hub repo description
+
+This page has moved to [Docker Docs website](https://docs.docker.com/build/ci/github-actions/update-dockerhub-desc/)
--- a/docs/advanced/export-docker.md
+++ b/docs/advanced/export-docker.md
@ -0,0 +1,3 @@
+# Export image to Docker
+
+This page has moved to [Docker Docs website](https://docs.docker.com/build/ci/github-actions/export-docker/)
--- a/docs/advanced/isolated-builders.md
+++ b/docs/advanced/isolated-builders.md
@ -0,0 +1,3 @@
+# Isolated builders
+
+This page has moved to [Docker Docs website](https://docs.docker.com/build/ci/github-actions/configure-builder/#isolated-builders)
--- a/docs/advanced/local-registry.md
+++ b/docs/advanced/local-registry.md
@ -0,0 +1,3 @@
+# Local registry
+
+This page has moved to [Docker Docs website](https://docs.docker.com/build/ci/github-actions/local-registry/)
--- a/docs/advanced/multi-platform.md
+++ b/docs/advanced/multi-platform.md
@ -0,0 +1,3 @@
+# Multi-platform image
+
+This page has moved to [Docker Docs website](https://docs.docker.com/build/ci/github-actions/multi-platform/)
--- a/docs/advanced/named-contexts.md
+++ b/docs/advanced/named-contexts.md
@ -0,0 +1,3 @@
+# Named contexts
+
+This page has moved to [Docker Docs website](https://docs.docker.com/build/ci/github-actions/named-contexts/)
--- a/docs/advanced/push-multi-registries.md
+++ b/docs/advanced/push-multi-registries.md
@ -0,0 +1,3 @@
+# Push to multi-registries
+
+This page has moved to [Docker Docs website](https://docs.docker.com/build/ci/github-actions/push-multi-registries/)
--- a/docs/advanced/secrets.md
+++ b/docs/advanced/secrets.md
@ -0,0 +1,3 @@
+# Secrets
+
+This page has moved to [Docker Docs website](https://docs.docker.com/build/ci/github-actions/secrets/)
--- a/docs/advanced/share-image-jobs.md
+++ b/docs/advanced/share-image-jobs.md
@ -0,0 +1,3 @@
+# Share built image between jobs
+
+This page has moved to [Docker Docs website](https://docs.docker.com/build/ci/github-actions/share-image-jobs/)
--- a/docs/advanced/tags-labels.md
+++ b/docs/advanced/tags-labels.md
@ -0,0 +1,3 @@
+# Handle tags and labels
+
+This page has moved to [Docker Docs website](https://docs.docker.com/build/ci/github-actions/manage-tags-labels/)
--- a/docs/advanced/test-before-push.md
+++ b/docs/advanced/test-before-push.md
@ -0,0 +1,3 @@
+# Test your image before pushing it
+
+This page has moved to [Docker Docs website](https://docs.docker.com/build/ci/github-actions/test-before-push/)
--- a/package.json
+++ b/package.json
@ -1,16 +1,13 @@
 {
  "name": "docker-build-push",
  "description": "Build and push Docker images",
-  "main": "src/main.ts",
+  "main": "lib/main.js",
  "scripts": {
-    "build": "ncc build --source-map --minify --license licenses.txt",
-    "lint": "yarn run prettier && yarn run eslint",
-    "format": "yarn run prettier:fix && yarn run eslint:fix",
-    "eslint": "eslint --max-warnings=0 .",
-    "eslint:fix": "eslint --fix .",
-    "prettier": "prettier --check \"./**/*.ts\"",
-    "prettier:fix": "prettier --write \"./**/*.ts\"",
-    "test": "jest"
+    "build": "ncc build src/main.ts --source-map --minify --license licenses.txt",
+    "lint": "eslint src/**/*.ts __tests__/**/*.ts",
+    "format": "eslint --fix src/**/*.ts __tests__/**/*.ts",
+    "test": "jest --coverage",
+    "all": "yarn run build && yarn run format && yarn test"
  },
  "repository": {
    "type": "git",
@ -22,27 +19,33 @@
    "build",
    "push"
  ],
-  "author": "Docker Inc.",
+  "author": "Docker",
+  "contributors": [
+    {
+      "name": "CrazyMax",
+      "url": "https://crazymax.dev"
+    }
+  ],
  "license": "Apache-2.0",
-  "packageManager": "yarn@3.6.3",
  "dependencies": {
-    "@actions/core": "^1.11.1",
-    "@docker/actions-toolkit": "0.59.0",
+    "@actions/core": "^1.10.0",
+    "@docker/actions-toolkit": "^0.5.0",
    "handlebars": "^4.7.7"
  },
  "devDependencies": {
-    "@types/node": "^20.12.12",
-    "@typescript-eslint/eslint-plugin": "^7.9.0",
-    "@typescript-eslint/parser": "^7.9.0",
-    "@vercel/ncc": "^0.38.1",
-    "eslint": "^8.57.0",
-    "eslint-config-prettier": "^9.1.0",
-    "eslint-plugin-jest": "^28.5.0",
-    "eslint-plugin-prettier": "^5.1.3",
-    "jest": "^29.7.0",
-    "prettier": "^3.2.5",
-    "ts-jest": "^29.1.2",
-    "ts-node": "^10.9.2",
-    "typescript": "^5.4.5"
+    "@types/csv-parse": "^1.2.2",
+    "@types/node": "^16.18.21",
+    "@typescript-eslint/eslint-plugin": "^5.56.0",
+    "@typescript-eslint/parser": "^5.56.0",
+    "@vercel/ncc": "^0.36.1",
+    "eslint": "^8.36.0",
+    "eslint-config-prettier": "^8.8.0",
+    "eslint-plugin-jest": "^27.2.1",
+    "eslint-plugin-prettier": "^4.2.1",
+    "jest": "^29.5.0",
+    "prettier": "^2.8.7",
+    "ts-jest": "^29.0.5",
+    "ts-node": "^10.9.1",
+    "typescript": "^4.9.5"
  }
 }
--- a/src/context.ts
+++ b/src/context.ts
@ -1,31 +1,28 @@
 import * as core from '@actions/core';
 import * as handlebars from 'handlebars';
-
-import {Build} from '@docker/actions-toolkit/lib/buildx/build';
 import {Context} from '@docker/actions-toolkit/lib/context';
 import {GitHub} from '@docker/actions-toolkit/lib/github';
+import {Inputs as BuildxInputs} from '@docker/actions-toolkit/lib/buildx/inputs';
 import {Toolkit} from '@docker/actions-toolkit/lib/toolkit';
 import {Util} from '@docker/actions-toolkit/lib/util';

 export interface Inputs {
-  'add-hosts': string[];
+  addHosts: string[];
  allow: string[];
-  annotations: string[];
  attests: string[];
-  'build-args': string[];
-  'build-contexts': string[];
+  buildArgs: string[];
+  buildContexts: string[];
  builder: string;
-  'cache-from': string[];
-  'cache-to': string[];
-  call: string;
-  'cgroup-parent': string;
+  cacheFrom: string[];
+  cacheTo: string[];
+  cgroupParent: string;
  context: string;
  file: string;
  labels: string[];
  load: boolean;
  network: string;
-  'no-cache': boolean;
-  'no-cache-filters': string[];
+  noCache: boolean;
+  noCacheFilters: string[];
  outputs: string[];
  platforms: string[];
  provenance: string;
@ -33,51 +30,47 @@ export interface Inputs {
  push: boolean;
  sbom: string;
  secrets: string[];
-  'secret-envs': string[];
-  'secret-files': string[];
-  'shm-size': string;
+  secretFiles: string[];
+  shmSize: string;
  ssh: string[];
  tags: string[];
  target: string;
  ulimit: string[];
-  'github-token': string;
+  githubToken: string;
 }

 export async function getInputs(): Promise<Inputs> {
  return {
-    'add-hosts': Util.getInputList('add-hosts'),
+    addHosts: Util.getInputList('add-hosts'),
    allow: Util.getInputList('allow'),
-    annotations: Util.getInputList('annotations', {ignoreComma: true}),
    attests: Util.getInputList('attests', {ignoreComma: true}),
-    'build-args': Util.getInputList('build-args', {ignoreComma: true}),
-    'build-contexts': Util.getInputList('build-contexts', {ignoreComma: true}),
+    buildArgs: Util.getInputList('build-args', {ignoreComma: true}),
+    buildContexts: Util.getInputList('build-contexts', {ignoreComma: true}),
    builder: core.getInput('builder'),
-    'cache-from': Util.getInputList('cache-from', {ignoreComma: true}),
-    'cache-to': Util.getInputList('cache-to', {ignoreComma: true}),
-    call: core.getInput('call'),
-    'cgroup-parent': core.getInput('cgroup-parent'),
+    cacheFrom: Util.getInputList('cache-from', {ignoreComma: true}),
+    cacheTo: Util.getInputList('cache-to', {ignoreComma: true}),
+    cgroupParent: core.getInput('cgroup-parent'),
    context: core.getInput('context') || Context.gitContext(),
    file: core.getInput('file'),
    labels: Util.getInputList('labels', {ignoreComma: true}),
    load: core.getBooleanInput('load'),
    network: core.getInput('network'),
-    'no-cache': core.getBooleanInput('no-cache'),
-    'no-cache-filters': Util.getInputList('no-cache-filters'),
-    outputs: Util.getInputList('outputs', {ignoreComma: true, quote: false}),
+    noCache: core.getBooleanInput('no-cache'),
+    noCacheFilters: Util.getInputList('no-cache-filters'),
+    outputs: Util.getInputList('outputs', {ignoreComma: true}),
    platforms: Util.getInputList('platforms'),
-    provenance: Build.getProvenanceInput('provenance'),
+    provenance: BuildxInputs.getProvenanceInput('provenance'),
    pull: core.getBooleanInput('pull'),
    push: core.getBooleanInput('push'),
    sbom: core.getInput('sbom'),
    secrets: Util.getInputList('secrets', {ignoreComma: true}),
-    'secret-envs': Util.getInputList('secret-envs'),
-    'secret-files': Util.getInputList('secret-files', {ignoreComma: true}),
-    'shm-size': core.getInput('shm-size'),
+    secretFiles: Util.getInputList('secret-files', {ignoreComma: true}),
+    shmSize: core.getInput('shm-size'),
    ssh: Util.getInputList('ssh'),
    tags: Util.getInputList('tags'),
    target: core.getInput('target'),
    ulimit: Util.getInputList('ulimit', {ignoreComma: true}),
-    'github-token': core.getInput('github-token')
+    githubToken: core.getInput('github-token')
  };
 }

@ -95,66 +88,44 @@ export async function getArgs(inputs: Inputs, toolkit: Toolkit): Promise<Array<s

 async function getBuildArgs(inputs: Inputs, context: string, toolkit: Toolkit): Promise<Array<string>> {
  const args: Array<string> = ['build'];
-  await Util.asyncForEach(inputs['add-hosts'], async addHost => {
+  await Util.asyncForEach(inputs.addHosts, async addHost => {
    args.push('--add-host', addHost);
  });
-  await Util.asyncForEach(inputs.allow, async allow => {
-    args.push('--allow', allow);
-  });
-  if (await toolkit.buildx.versionSatisfies('>=0.12.0')) {
-    await Util.asyncForEach(inputs.annotations, async annotation => {
-      args.push('--annotation', annotation);
-    });
-  } else if (inputs.annotations.length > 0) {
-    core.warning("Annotations are only supported by buildx >= 0.12.0; the input 'annotations' is ignored.");
+  if (inputs.allow.length > 0) {
+    args.push('--allow', inputs.allow.join(','));
  }
-  await Util.asyncForEach(inputs['build-args'], async buildArg => {
+  if (await toolkit.buildx.versionSatisfies('>=0.10.0')) {
+    await Util.asyncForEach(inputs.attests, async attest => {
+      args.push('--attest', attest);
+    });
+  }
+  await Util.asyncForEach(inputs.buildArgs, async buildArg => {
    args.push('--build-arg', buildArg);
  });
  if (await toolkit.buildx.versionSatisfies('>=0.8.0')) {
-    await Util.asyncForEach(inputs['build-contexts'], async buildContext => {
-      args.push(
-        '--build-context',
-        handlebars.compile(buildContext)({
-          defaultContext: Context.gitContext()
-        })
-      );
+    await Util.asyncForEach(inputs.buildContexts, async buildContext => {
+      args.push('--build-context', buildContext);
    });
-  } else if (inputs['build-contexts'].length > 0) {
-    core.warning("Build contexts are only supported by buildx >= 0.8.0; the input 'build-contexts' is ignored.");
  }
-  await Util.asyncForEach(inputs['cache-from'], async cacheFrom => {
+  await Util.asyncForEach(inputs.cacheFrom, async cacheFrom => {
    args.push('--cache-from', cacheFrom);
  });
-  await Util.asyncForEach(inputs['cache-to'], async cacheTo => {
+  await Util.asyncForEach(inputs.cacheTo, async cacheTo => {
    args.push('--cache-to', cacheTo);
  });
-  if (inputs.call) {
-    if (!(await toolkit.buildx.versionSatisfies('>=0.15.0'))) {
-      throw new Error(`Buildx >= 0.15.0 is required to use the call flag.`);
-    }
-    args.push('--call', inputs.call);
+  if (inputs.cgroupParent) {
+    args.push('--cgroup-parent', inputs.cgroupParent);
  }
-  if (inputs['cgroup-parent']) {
-    args.push('--cgroup-parent', inputs['cgroup-parent']);
-  }
-  await Util.asyncForEach(inputs['secret-envs'], async secretEnv => {
-    try {
-      args.push('--secret', Build.resolveSecretEnv(secretEnv));
-    } catch (err) {
-      core.warning(err.message);
-    }
-  });
  if (inputs.file) {
    args.push('--file', inputs.file);
  }
-  if (!Build.hasLocalExporter(inputs.outputs) && !Build.hasTarExporter(inputs.outputs) && (inputs.platforms.length == 0 || (await toolkit.buildx.versionSatisfies('>=0.4.2')))) {
-    args.push('--iidfile', toolkit.buildxBuild.getImageIDFilePath());
+  if (!BuildxInputs.hasLocalExporter(inputs.outputs) && !BuildxInputs.hasTarExporter(inputs.outputs) && (inputs.platforms.length == 0 || (await toolkit.buildx.versionSatisfies('>=0.4.2')))) {
+    args.push('--iidfile', BuildxInputs.getBuildImageIDFilePath());
  }
  await Util.asyncForEach(inputs.labels, async label => {
    args.push('--label', label);
  });
-  await Util.asyncForEach(inputs['no-cache-filters'], async noCacheFilter => {
+  await Util.asyncForEach(inputs.noCacheFilters, async noCacheFilter => {
    args.push('--no-cache-filter', noCacheFilter);
  });
  await Util.asyncForEach(inputs.outputs, async output => {
@ -164,29 +135,44 @@ async function getBuildArgs(inputs: Inputs, context: string, toolkit: Toolkit):
    args.push('--platform', inputs.platforms.join(','));
  }
  if (await toolkit.buildx.versionSatisfies('>=0.10.0')) {
-    args.push(...(await getAttestArgs(inputs, toolkit)));
-  } else {
-    core.warning("Attestations are only supported by buildx >= 0.10.0; the inputs 'attests', 'provenance' and 'sbom' are ignored.");
+    if (inputs.provenance) {
+      args.push('--provenance', inputs.provenance);
+    } else if ((await toolkit.buildkit.versionSatisfies(inputs.builder, '>=0.11.0')) && !BuildxInputs.hasDockerExporter(inputs.outputs, inputs.load)) {
+      // if provenance not specified and BuildKit version compatible for
+      // attestation, set default provenance. Also needs to make sure user
+      // doesn't want to explicitly load the image to docker.
+      if (GitHub.context.payload.repository?.private ?? false) {
+        // if this is a private repository, we set the default provenance
+        // attributes being set in buildx: https://github.com/docker/buildx/blob/fb27e3f919dcbf614d7126b10c2bc2d0b1927eb6/build/build.go#L603
+        args.push('--provenance', BuildxInputs.resolveProvenanceAttrs(`mode=min,inline-only=true`));
+      } else {
+        // for a public repository, we set max provenance mode.
+        args.push('--provenance', BuildxInputs.resolveProvenanceAttrs(`mode=max`));
+      }
+    }
+    if (inputs.sbom) {
+      args.push('--sbom', inputs.sbom);
+    }
  }
  await Util.asyncForEach(inputs.secrets, async secret => {
    try {
-      args.push('--secret', Build.resolveSecretString(secret));
+      args.push('--secret', BuildxInputs.resolveBuildSecretString(secret));
    } catch (err) {
      core.warning(err.message);
    }
  });
-  await Util.asyncForEach(inputs['secret-files'], async secretFile => {
+  await Util.asyncForEach(inputs.secretFiles, async secretFile => {
    try {
-      args.push('--secret', Build.resolveSecretFile(secretFile));
+      args.push('--secret', BuildxInputs.resolveBuildSecretFile(secretFile));
    } catch (err) {
      core.warning(err.message);
    }
  });
-  if (inputs['github-token'] && !Build.hasGitAuthTokenSecret(inputs.secrets) && context.startsWith(Context.gitContext())) {
-    args.push('--secret', Build.resolveSecretString(`GIT_AUTH_TOKEN=${inputs['github-token']}`));
+  if (inputs.githubToken && !BuildxInputs.hasGitAuthTokenSecret(inputs.secrets) && context.startsWith(Context.gitContext())) {
+    args.push('--secret', BuildxInputs.resolveBuildSecretString(`GIT_AUTH_TOKEN=${inputs.githubToken}`));
  }
-  if (inputs['shm-size']) {
-    args.push('--shm-size', inputs['shm-size']);
+  if (inputs.shmSize) {
+    args.push('--shm-size', inputs.shmSize);
  }
  await Util.asyncForEach(inputs.ssh, async ssh => {
    args.push('--ssh', ssh);
@ -212,12 +198,12 @@ async function getCommonArgs(inputs: Inputs, toolkit: Toolkit): Promise<Array<st
    args.push('--load');
  }
  if (await toolkit.buildx.versionSatisfies('>=0.6.0')) {
-    args.push('--metadata-file', toolkit.buildxBuild.getMetadataFilePath());
+    args.push('--metadata-file', BuildxInputs.getBuildMetadataFilePath());
  }
  if (inputs.network) {
    args.push('--network', inputs.network);
  }
-  if (inputs['no-cache']) {
+  if (inputs.noCache) {
    args.push('--no-cache');
  }
  if (inputs.pull) {
@ -228,52 +214,3 @@ async function getCommonArgs(inputs: Inputs, toolkit: Toolkit): Promise<Array<st
  }
  return args;
 }
-
-async function getAttestArgs(inputs: Inputs, toolkit: Toolkit): Promise<Array<string>> {
-  const args: Array<string> = [];
-
-  // check if provenance attestation is set in attests input
-  let hasAttestProvenance = false;
-  await Util.asyncForEach(inputs.attests, async (attest: string) => {
-    if (Build.hasAttestationType('provenance', attest)) {
-      hasAttestProvenance = true;
-    }
-  });
-
-  let provenanceSet = false;
-  let sbomSet = false;
-  if (inputs.provenance) {
-    args.push('--attest', Build.resolveAttestationAttrs(`type=provenance,${inputs.provenance}`));
-    provenanceSet = true;
-  } else if (!hasAttestProvenance && (await toolkit.buildkit.versionSatisfies(inputs.builder, '>=0.11.0')) && !Build.hasDockerExporter(inputs.outputs, inputs.load)) {
-    // if provenance not specified in provenance or attests inputs and BuildKit
-    // version compatible for attestation, set default provenance. Also needs
-    // to make sure user doesn't want to explicitly load the image to docker.
-    if (GitHub.context.payload.repository?.private ?? false) {
-      // if this is a private repository, we set the default provenance
-      // attributes being set in buildx: https://github.com/docker/buildx/blob/fb27e3f919dcbf614d7126b10c2bc2d0b1927eb6/build/build.go#L603
-      args.push('--attest', `type=provenance,${Build.resolveProvenanceAttrs(`mode=min,inline-only=true`)}`);
-    } else {
-      // for a public repository, we set max provenance mode.
-      args.push('--attest', `type=provenance,${Build.resolveProvenanceAttrs(`mode=max`)}`);
-    }
-  }
-  if (inputs.sbom) {
-    args.push('--attest', Build.resolveAttestationAttrs(`type=sbom,${inputs.sbom}`));
-    sbomSet = true;
-  }
-
-  // set attests but check if provenance or sbom types already set as
-  // provenance and sbom inputs take precedence over attests input.
-  await Util.asyncForEach(inputs.attests, async (attest: string) => {
-    if (!Build.hasAttestationType('provenance', attest) && !Build.hasAttestationType('sbom', attest)) {
-      args.push('--attest', Build.resolveAttestationAttrs(attest));
-    } else if (!provenanceSet && Build.hasAttestationType('provenance', attest)) {
-      args.push('--attest', Build.resolveProvenanceAttrs(attest));
-    } else if (!sbomSet && Build.hasAttestationType('sbom', attest)) {
-      args.push('--attest', attest);
-    }
-  });
-
-  return args;
-}
--- a/src/main.ts
+++ b/src/main.ts
@ -1,32 +1,20 @@
 import * as fs from 'fs';
-import * as path from 'path';
 import * as stateHelper from './state-helper';
 import * as core from '@actions/core';
 import * as actionsToolkit from '@docker/actions-toolkit';
-
-import {Buildx} from '@docker/actions-toolkit/lib/buildx/buildx';
-import {History as BuildxHistory} from '@docker/actions-toolkit/lib/buildx/history';
 import {Context} from '@docker/actions-toolkit/lib/context';
 import {Docker} from '@docker/actions-toolkit/lib/docker/docker';
 import {Exec} from '@docker/actions-toolkit/lib/exec';
 import {GitHub} from '@docker/actions-toolkit/lib/github';
+import {Inputs as BuildxInputs} from '@docker/actions-toolkit/lib/buildx/inputs';
 import {Toolkit} from '@docker/actions-toolkit/lib/toolkit';
-import {Util} from '@docker/actions-toolkit/lib/util';
-
-import {BuilderInfo} from '@docker/actions-toolkit/lib/types/buildx/builder';
-import {ConfigFile} from '@docker/actions-toolkit/lib/types/docker/docker';
-import {UploadArtifactResponse} from '@docker/actions-toolkit/lib/types/github';

 import * as context from './context';

 actionsToolkit.run(
  // main
  async () => {
-    const startedTime = new Date();
    const inputs: context.Inputs = await context.getInputs();
-    stateHelper.setSummaryInputs(inputs);
-    core.debug(`inputs: ${JSON.stringify(inputs)}`);
-
    const toolkit = new Toolkit();

    await core.group(`GitHub Actions runtime token ACs`, async () => {
@ -46,31 +34,6 @@ actionsToolkit.run(
      }
    });

-    await core.group(`Proxy configuration`, async () => {
-      let dockerConfig: ConfigFile | undefined;
-      let dockerConfigMalformed = false;
-      try {
-        dockerConfig = await Docker.configFile();
-      } catch (e) {
-        dockerConfigMalformed = true;
-        core.warning(`Unable to parse config file ${path.join(Docker.configDir, 'config.json')}: ${e}`);
-      }
-      if (dockerConfig && dockerConfig.proxies) {
-        for (const host in dockerConfig.proxies) {
-          let prefix = '';
-          if (Object.keys(dockerConfig.proxies).length > 1) {
-            prefix = '  ';
-            core.info(host);
-          }
-          for (const key in dockerConfig.proxies[host]) {
-            core.info(`${prefix}${key}: ${dockerConfig.proxies[host][key]}`);
-          }
-        }
-      } else if (!dockerConfigMalformed) {
-        core.info('No proxy configuration found');
-      }
-    });
-
    if (!(await toolkit.buildx.isAvailable())) {
      core.setFailed(`Docker buildx is required. See https://github.com/docker/setup-buildx-action to set up buildx.`);
      return;
@ -82,42 +45,20 @@ actionsToolkit.run(
      await toolkit.buildx.printVersion();
    });

-    let builder: BuilderInfo;
-    await core.group(`Builder info`, async () => {
-      builder = await toolkit.builder.inspect(inputs.builder);
-      core.info(JSON.stringify(builder, null, 2));
-    });
-
    const args: string[] = await context.getArgs(inputs, toolkit);
-    core.debug(`context.getArgs: ${JSON.stringify(args)}`);
-
    const buildCmd = await toolkit.buildx.getCommand(args);
-    core.debug(`buildCmd.command: ${buildCmd.command}`);
-    core.debug(`buildCmd.args: ${JSON.stringify(buildCmd.args)}`);
-
-    let err: Error | undefined;
    await Exec.getExecOutput(buildCmd.command, buildCmd.args, {
-      ignoreReturnCode: true,
-      env: Object.assign({}, process.env, {
-        BUILDX_METADATA_WARNINGS: 'true'
-      }) as {
-        [key: string]: string;
-      }
+      ignoreReturnCode: true
    }).then(res => {
-      if (res.exitCode != 0) {
-        if (inputs.call && inputs.call === 'check' && res.stdout.length > 0) {
-          // checks warnings are printed to stdout: https://github.com/docker/buildx/pull/2647
-          // take the first line with the message summaryzing the warnings
-          err = new Error(res.stdout.split('\n')[0]?.trim());
-        } else if (res.stderr.length > 0) {
-          err = new Error(`buildx failed with: ${res.stderr.match(/(.*)\s*$/)?.[0]?.trim() ?? 'unknown error'}`);
-        }
+      if (res.stderr.length > 0 && res.exitCode != 0) {
+        throw new Error(`buildx failed with: ${res.stderr.match(/(.*)\s*$/)?.[0]?.trim() ?? 'unknown error'}`);
      }
    });

-    const imageID = toolkit.buildxBuild.resolveImageID();
-    const metadata = toolkit.buildxBuild.resolveMetadata();
-    const digest = toolkit.buildxBuild.resolveDigest(metadata);
+    const imageID = BuildxInputs.resolveBuildImageID();
+    const metadata = BuildxInputs.resolveBuildMetadata();
+    const digest = BuildxInputs.resolveDigest();
+
    if (imageID) {
      await core.group(`ImageID`, async () => {
        core.info(imageID);
@ -132,165 +73,17 @@ actionsToolkit.run(
    }
    if (metadata) {
      await core.group(`Metadata`, async () => {
-        const metadatadt = JSON.stringify(metadata, null, 2);
-        core.info(metadatadt);
-        core.setOutput('metadata', metadatadt);
+        core.info(metadata);
+        core.setOutput('metadata', metadata);
      });
    }
-
-    let ref: string | undefined;
-    await core.group(`Reference`, async () => {
-      ref = await buildRef(toolkit, startedTime, inputs.builder);
-      if (ref) {
-        core.info(ref);
-        stateHelper.setBuildRef(ref);
-      } else {
-        core.info('No build reference found');
-      }
-    });
-
-    if (buildChecksAnnotationsEnabled()) {
-      const warnings = toolkit.buildxBuild.resolveWarnings(metadata);
-      if (ref && warnings && warnings.length > 0) {
-        const annotations = await Buildx.convertWarningsToGitHubAnnotations(warnings, [ref]);
-        core.debug(`annotations: ${JSON.stringify(annotations, null, 2)}`);
-        if (annotations && annotations.length > 0) {
-          await core.group(`Generating GitHub annotations (${annotations.length} build checks found)`, async () => {
-            for (const annotation of annotations) {
-              core.warning(annotation.message, annotation);
-            }
-          });
-        }
-      }
-    }
-
-    await core.group(`Check build summary support`, async () => {
-      if (!buildSummaryEnabled()) {
-        core.info('Build summary disabled');
-      } else if (inputs.call && inputs.call !== 'build') {
-        core.info(`Build summary skipped for ${inputs.call} subrequest`);
-      } else if (GitHub.isGHES) {
-        core.info('Build summary is not yet supported on GHES');
-      } else if (!(await toolkit.buildx.versionSatisfies('>=0.13.0'))) {
-        core.info('Build summary requires Buildx >= 0.13.0');
-      } else if (builder && builder.driver === 'cloud') {
-        core.info('Build summary is not yet supported with Docker Build Cloud');
-      } else if (!ref) {
-        core.info('Build summary requires a build reference');
-      } else {
-        core.info('Build summary supported!');
-        stateHelper.setSummarySupported();
-      }
-    });
-
-    if (err) {
-      throw err;
-    }
  },
  // post
  async () => {
-    if (stateHelper.isSummarySupported) {
-      await core.group(`Generating build summary`, async () => {
-        try {
-          const recordUploadEnabled = buildRecordUploadEnabled();
-          let recordRetentionDays: number | undefined;
-          if (recordUploadEnabled) {
-            recordRetentionDays = buildRecordRetentionDays();
-          }
-
-          const buildxHistory = new BuildxHistory();
-          const exportRes = await buildxHistory.export({
-            refs: stateHelper.buildRef ? [stateHelper.buildRef] : []
-          });
-          core.info(`Build record written to ${exportRes.dockerbuildFilename} (${Util.formatFileSize(exportRes.dockerbuildSize)})`);
-
-          let uploadRes: UploadArtifactResponse | undefined;
-          if (recordUploadEnabled) {
-            uploadRes = await GitHub.uploadArtifact({
-              filename: exportRes.dockerbuildFilename,
-              mimeType: 'application/gzip',
-              retentionDays: recordRetentionDays
-            });
-          }
-
-          await GitHub.writeBuildSummary({
-            exportRes: exportRes,
-            uploadRes: uploadRes,
-            inputs: stateHelper.summaryInputs
-          });
-        } catch (e) {
-          core.warning(e.message);
-        }
-      });
-    }
    if (stateHelper.tmpDir.length > 0) {
      await core.group(`Removing temp folder ${stateHelper.tmpDir}`, async () => {
-        try {
-          fs.rmSync(stateHelper.tmpDir, {recursive: true});
-        } catch (e) {
-          core.warning(`Failed to remove temp folder ${stateHelper.tmpDir}`);
-        }
+        fs.rmSync(stateHelper.tmpDir, {recursive: true});
      });
    }
  }
 );
-
-async function buildRef(toolkit: Toolkit, since: Date, builder?: string): Promise<string> {
-  // get ref from metadata file
-  const ref = toolkit.buildxBuild.resolveRef();
-  if (ref) {
-    return ref;
-  }
-  // otherwise, look for the very first build ref since the build has started
-  if (!builder) {
-    const currentBuilder = await toolkit.builder.inspect();
-    builder = currentBuilder.name;
-  }
-  const refs = Buildx.refs({
-    dir: Buildx.refsDir,
-    builderName: builder,
-    since: since
-  });
-  return Object.keys(refs).length > 0 ? Object.keys(refs)[0] : '';
-}
-
-function buildChecksAnnotationsEnabled(): boolean {
-  if (process.env.DOCKER_BUILD_CHECKS_ANNOTATIONS) {
-    return Util.parseBool(process.env.DOCKER_BUILD_CHECKS_ANNOTATIONS);
-  }
-  return true;
-}
-
-function buildSummaryEnabled(): boolean {
-  if (process.env.DOCKER_BUILD_NO_SUMMARY) {
-    core.warning('DOCKER_BUILD_NO_SUMMARY is deprecated. Set DOCKER_BUILD_SUMMARY to false instead.');
-    return !Util.parseBool(process.env.DOCKER_BUILD_NO_SUMMARY);
-  } else if (process.env.DOCKER_BUILD_SUMMARY) {
-    return Util.parseBool(process.env.DOCKER_BUILD_SUMMARY);
-  }
-  return true;
-}
-
-function buildRecordUploadEnabled(): boolean {
-  if (process.env.DOCKER_BUILD_RECORD_UPLOAD) {
-    return Util.parseBool(process.env.DOCKER_BUILD_RECORD_UPLOAD);
-  }
-  return true;
-}
-
-function buildRecordRetentionDays(): number | undefined {
-  let val: string | undefined;
-  if (process.env.DOCKER_BUILD_EXPORT_RETENTION_DAYS) {
-    core.warning('DOCKER_BUILD_EXPORT_RETENTION_DAYS is deprecated. Use DOCKER_BUILD_RECORD_RETENTION_DAYS instead.');
-    val = process.env.DOCKER_BUILD_EXPORT_RETENTION_DAYS;
-  } else if (process.env.DOCKER_BUILD_RECORD_RETENTION_DAYS) {
-    val = process.env.DOCKER_BUILD_RECORD_RETENTION_DAYS;
-  }
-  if (val) {
-    const res = parseInt(val);
-    if (isNaN(res)) {
-      throw new Error(`Invalid build record retention days: ${val}`);
-    }
-    return res;
-  }
-}
--- a/src/state-helper.ts
+++ b/src/state-helper.ts
@ -1,58 +1,7 @@
 import * as core from '@actions/core';

-import {Build} from '@docker/actions-toolkit/lib/buildx/build';
-
-import {Inputs} from './context';
-
 export const tmpDir = process.env['STATE_tmpDir'] || '';
-export const buildRef = process.env['STATE_buildRef'] || '';
-export const isSummarySupported = !!process.env['STATE_isSummarySupported'];
-export const summaryInputs = process.env['STATE_summaryInputs'] ? JSON.parse(process.env['STATE_summaryInputs']) : undefined;

 export function setTmpDir(tmpDir: string) {
  core.saveState('tmpDir', tmpDir);
 }
-
-export function setBuildRef(buildRef: string) {
-  core.saveState('buildRef', buildRef);
-}
-
-export function setSummarySupported() {
-  core.saveState('isSummarySupported', 'true');
-}
-
-export function setSummaryInputs(inputs: Inputs) {
-  const res = {};
-  for (const key of Object.keys(inputs)) {
-    if (key === 'github-token') {
-      continue;
-    }
-    const value: string | string[] | boolean = inputs[key];
-    if (typeof value === 'boolean' && !value) {
-      continue;
-    } else if (Array.isArray(value)) {
-      if (value.length === 0) {
-        continue;
-      } else if (key === 'secrets' && value.length > 0) {
-        const secretKeys: string[] = [];
-        for (const secret of value) {
-          try {
-            // eslint-disable-next-line @typescript-eslint/no-unused-vars
-            const [skey, _] = Build.parseSecretKvp(secret, true);
-            secretKeys.push(skey);
-          } catch (err) {
-            // ignore invalid secret
-          }
-        }
-        if (secretKeys.length > 0) {
-          res[key] = secretKeys;
-        }
-        continue;
-      }
-    } else if (!value) {
-      continue;
-    }
-    res[key] = value;
-  }
-  core.saveState('summaryInputs', JSON.stringify(res));
-}
--- a/test/lint.Dockerfile
+++ b/test/lint.Dockerfile
@ -1,12 +0,0 @@
-frOM busybox as base
-cOpy lint.Dockerfile .
-
-from scratch
-MAINTAINER moby@example.com
-COPy --from=base \
-  /lint.Dockerfile \
-  /
-
-CMD [ "echo", "Hello, Norway!" ]
-CMD [ "echo", "Hello, Sweden!" ]
-ENTRYPOINT my-program start
--- a/test/multi-sudo.Dockerfile
+++ b/test/multi-sudo.Dockerfile
@ -1,6 +1,5 @@
 # syntax=docker/dockerfile:1
-
-FROM --platform=$BUILDPLATFORM alpine AS build
+FROM --platform=$BUILDPLATFORM golang:alpine AS build
 ARG TARGETPLATFORM
 ARG BUILDPLATFORM
 RUN echo "I am running on $BUILDPLATFORM, building for $TARGETPLATFORM" > /log
@ -13,7 +12,7 @@ RUN apk --update --no-cache add \
  && rm -rf /tmp/* /var/cache/apk/*

 USER buildx
-RUN sudo chown buildx: /log
+RUN sudo chown buildx. /log
 USER root

 FROM alpine
--- a/test/proxy.Dockerfile
+++ b/test/proxy.Dockerfile
@ -1,9 +0,0 @@
-# syntax=docker/dockerfile:1
-FROM alpine
-RUN apk add --no-cache curl net-tools
-ARG HTTP_PROXY
-ARG HTTPS_PROXY
-RUN printenv HTTP_PROXY
-RUN printenv HTTPS_PROXY
-RUN netstat -aptn
-RUN curl --retry 5 --retry-all-errors --retry-delay 0 --connect-timeout 5 --proxy $HTTP_PROXY -v --insecure --head https://www.google.com
--- a/yarn.lock
+++ b/yarn.lock