From 7c92dbeab9b2eb5e494a3acdc07889008c3f4a6d Mon Sep 17 00:00:00 2001 From: Sebastian Mendel Date: Thu, 16 Jul 2026 09:54:09 +0200 Subject: [PATCH] fix(ci): bake build provenance into the profiling image MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The prod hot-deploy runs the :profiling- image, but only the `app` (release) bake target set APP_BUILD_REVISION/REF/DATE — `app-profiling` inherited only _common and passed no build args, so the deployed image had them empty and /ui/admin/status showed "unknown". Add the args to app-profiling and pass GIT_REF + BUILD_DATE (not just GIT_SHA) to the profiling build step, so the status page shows the deployed commit, ref and build date. Signed-off-by: Sebastian Mendel --- .github/workflows/docker-publish.yml | 2 ++ docker-bake.hcl | 8 ++++++++ 2 files changed, 10 insertions(+) diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index 3bb1f5c7e..4d1edd8b9 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -99,6 +99,8 @@ jobs: uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0 env: GIT_SHA: ${{ github.sha }} + GIT_REF: ${{ github.ref_name }} + BUILD_DATE: ${{ env.BUILD_DATE }} with: source: . targets: app-profiling diff --git a/docker-bake.hcl b/docker-bake.hcl index 9f5ce8b60..3f7a937bb 100644 --- a/docker-bake.hcl +++ b/docker-bake.hcl @@ -155,6 +155,14 @@ target "app-e2e" { target "app-profiling" { inherits = ["_common"] target = "profiling" + # Bake the build provenance into the profiling image too (like the `app` target), + # so /ui/admin/status shows the deployed commit/ref/date — the prod hot-deploy runs + # :profiling-, not the release image, so without this the page reads "unknown". + args = { + APP_BUILD_REVISION = GIT_SHA + APP_BUILD_REF = GIT_REF + APP_BUILD_DATE = BUILD_DATE + } tags = compact([ "${REGISTRY}/${IMAGE_NAME}:profiling", GIT_SHA != "" ? "${REGISTRY}/${IMAGE_NAME}:profiling-${GIT_SHA}" : "",