mathiasandClaude Opus 5 020edc5b3a ci: re-sync build-image.sh — adds TARGET and BUILD_SECRETS (infra#309) ...

Canonical gained two inputs so the repos still to migrate can adopt
without forking the script again: TARGET for multi-stage builds (cad,
agentsquad) and BUILD_SECRETS for buildkit secret mounts (agentsquad).

BUILD_SECRETS takes the SPEC only (`id=NAME,src=PATH`) -- the caller
writes the secret to PATH itself, so no secret value ever reaches this
script's argv or the CI log.

Unused here; this repo's copy just stays byte-identical, which is the
whole point. Written by `task ci:sync`, not by hand.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011PL5XcG68SvQqz3vGVbWbf

2026-08-25 11:27:06 +02:00

..

workflows

ci(cd): call the shared build-image script instead of inlining it (infra#309)

2026-08-25 08:52:26 +00:00

build-image.sh

ci: re-sync build-image.sh — adds TARGET and BUILD_SECRETS (infra#309)

2026-08-25 11:27:06 +02:00