Function buildAndPushImage

packages/container/src/index.ts:70–254

(params: {
  contextDir: string;
  dockerfilePath: string;
  repository: string;
  tag: string;
  buildArgs?: Record<string, string>;
  parentSpan?: Span;
})

}

async function buildAndPushImage(params: {
  contextDir: string;
  dockerfilePath: string;
  repository: string;
  tag: string;
  buildArgs?: Record<string, string>;
  parentSpan?: Span;
}): Promise<string> {
  const { contextDir, dockerfilePath, repository, tag, buildArgs, parentSpan } =
    params;
  const engine = selectContainerEngine();

  return withSpan(
    parentSpan,
    'container.build_and_push',
    {
      'container.engine': engine.name,
      'container.registry': VCR_REGISTRY,
      'container.repository': repository,
    },
    async buildSpan => {
      const token = await withSpan(buildSpan, 'container.mint_oidc', {}, s =>
        resolveOidcTokenForBuild(s)
      );

      const claims = decodeOidcClaims(token);
      debug(`registry token: ${tokenFingerprint(token)}`);
      debugTokenClaims('OIDC token claims', token);

      const username = claims.owner_id;
      if (!username) {
        throw new Error(
          'VERCEL_OIDC_TOKEN is missing the `owner_id` (team id) claim required to ' +
            'authenticate to the container registry.'
        );
      }

      const fullRepository = [claims.owner, claims.project, repository].join(
        '/'
      );
      const imageRef = `${VCR_REGISTRY}/${fullRepository}:${tag}`;

      buildSpan?.setAttributes({
        'container.repository': fullRepository,
        'image.tag': tag,
        'image.ref': imageRef,
        'registry.username': username,
      });

      return engine.withRuntime(buildSpan, async () => {
        await withSpan(
          buildSpan,
          'container.ensure_toolchain_ready',
          { 'container.engine': engine.name },
          s => engine.ensureReady(s)
        );

        await withSpan(