Docker

Copies an existing source image tagged with the revision SHA to a new target tagged with the released version. Supports Docker Hub, GitHub Container Registry (ghcr.io), Google Container Registry (gcr.io), and other OCI-compliant registries.

Configuration

Option	Description
`source`	Source image: string or object with `image`, `registry`, `format`, `usernameVar`, `passwordVar`, `skipLogin`
`target`	Target image: string or object (same options as source)

Image Object Options

Property	Description
`image`	Docker image path (e.g., `ghcr.io/org/image`)
`registry`	Override the registry (auto-detected from `image`)
`format`	Format template. Default: `{{{source}}}:{{{revision}}}` for source
`usernameVar`	Env var name for username
`passwordVar`	Env var name for password
`skipLogin`	Skip `docker login` for this registry

Environment Variables

Target Registry Credentials (resolved in order):

Explicit usernameVar/passwordVar from config
Registry-derived: DOCKER_<REGISTRY>_USERNAME/PASSWORD (e.g., DOCKER_GHCR_IO_USERNAME)
Built-in defaults for ghcr.io: GITHUB_ACTOR and GITHUB_TOKEN
Fallback: DOCKER_USERNAME and DOCKER_PASSWORD

Name	Description
`DOCKER_USERNAME`	Default username for target registry
`DOCKER_PASSWORD`	Default password/token for target registry
`DOCKER_BIN`	Path to `docker` executable

Examples

Docker Hub

targets:
  - name: docker
    source: ghcr.io/getsentry/craft
    target: getsentry/craft

GitHub Container Registry (zero-config in GitHub Actions)

targets:
  - name: docker
    source: ghcr.io/getsentry/craft
    target: ghcr.io/getsentry/craft

Multiple Registries

targets:
  # Docker Hub
  - name: docker
    source: ghcr.io/getsentry/craft
    target: getsentry/craft

  # GHCR
  - name: docker
    source: ghcr.io/getsentry/craft
    target: ghcr.io/getsentry/craft

  # GCR with shared credentials
  - name: docker
    source: ghcr.io/getsentry/craft
    target: us.gcr.io/my-project/craft
    registry: gcr.io

Cross-registry with Explicit Credentials

targets:
  - name: docker
    source:
      image: private.registry.io/image
      usernameVar: PRIVATE_REGISTRY_USER
      passwordVar: PRIVATE_REGISTRY_PASS
    target: getsentry/craft

Google Cloud Registries

Craft auto-detects Google Cloud registries and uses gcloud auth configure-docker:

# Works with google-github-actions/auth
targets:
  - name: docker
    source: ghcr.io/myorg/image
    target: us-docker.pkg.dev/my-project/repo/image