> "$GITHUB_OUTPUT" Key differences from a JS action: Docker container actions always run on Linux — they cannot execute on Windows or macOS GitHub-hosted runners. The /github/workspace path inside the container is the checked-out repository. You can also reference a pre-built public image (image: 'docker://alpine:3.19') instead of a local Dockerfile to skip the build step. Container build adds latency (~30–60 s) compared to a JS action that starts instantly."> > "$GITHUB_OUTPUT" Key differences from a JS action: Docker container actions always run on Linux — they cannot execute on Windows or macOS GitHub-hosted runners. The /github/workspace path inside the container is the checked-out repository. You can also reference a pre-built public image (image: 'docker://alpine:3.19') instead of a local Dockerfile to skip the build step. Container build adds latency (~30–60 s) compared to a JS action that starts instantly." />

Prev Next

Maven / GitHub Actions Interview Questions

How do you write a custom Docker container action for GitHub Actions?

A Docker container action packages its logic and dependencies in a Docker image, giving complete control over the execution environment. It is ideal when your action requires a specific OS, binary tools not available on the runner, or a compiled language without a portable pre-built binary.

action.yml:

name: 'OWASP Dependency Check'
description: 'Run dependency vulnerability scan inside Docker'
inputs:
  project-name:
    description: 'Project name for the report'
    required: true
runs:
  using: 'docker'
  image: 'Dockerfile'        # build from local Dockerfile
  args:
    - ${{ inputs.project-name }}

Dockerfile:

FROM openjdk:21-slim
RUN apt-get update && apt-get install -y curl unzip     && curl -Lo dc.zip https://github.com/jeremylong/DependencyCheck/releases/download/v9.0.0/dependency-check-9.0.0-release.zip     && unzip dc.zip -d /opt && rm dc.zip

COPY entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh
ENTRYPOINT ["/entrypoint.sh"]

entrypoint.sh:

#!/bin/bash
set -e
PROJECT_NAME="$1"
/opt/dependency-check/bin/dependency-check.sh   --project "$PROJECT_NAME"   --scan /github/workspace   --format HTML   --out /github/workspace/dc-report
echo "report-path=dc-report/dependency-check-report.html" >> "$GITHUB_OUTPUT"

Key differences from a JS action:

  • Docker container actions always run on Linux — they cannot execute on Windows or macOS GitHub-hosted runners.
  • The /github/workspace path inside the container is the checked-out repository.
  • You can also reference a pre-built public image (image: 'docker://alpine:3.19') instead of a local Dockerfile to skip the build step.
  • Container build adds latency (~30–60 s) compared to a JS action that starts instantly.
On which operating systems can Docker container actions run in GitHub Actions?
Inside a Docker container action, which path maps to the checked-out repository workspace?

Invest now in Acorns!!! 🚀 Join Acorns and get your $5 bonus!

Invest now in Acorns!!! 🚀
Join Acorns and get your $5 bonus!

Earn passively and while sleeping

Acorns is a micro-investing app that automatically invests your "spare change" from daily purchases into diversified, expert-built portfolios of ETFs. It is designed for beginners, allowing you to start investing with as little as $5. The service automates saving and investing. Disclosure: I may receive a referral bonus.

Invest now!!! Get Free equity stock (US, UK only)!

Use Robinhood app to invest in stocks. It is safe and secure. Use the Referral link to claim your free stock when you sign up!.

The Robinhood app makes it easy to trade stocks, crypto and more.

Webull! Receive free stock by signing up using the link: Webull signup.

More Related questions...

What is GitHub Actions and what problems does it solve? What are the key components of GitHub Actions — workflows, jobs, steps, actions, and runners? How is a GitHub Actions workflow file structured, and where must it be placed? What are workflow triggers (on:) and which event types does GitHub Actions support? What is the difference between push, pull_request, and workflow_dispatch triggers? What are jobs in GitHub Actions, and how do they run in parallel by default? What are steps, and what is the difference between run: and uses: in a step? What are runners, and what is the difference between GitHub-hosted and self-hosted runners? What is the GitHub Actions Marketplace and how do you find and use actions from it? How do you use the actions/checkout action and what does it do? How do you pass environment variables and secrets to a GitHub Actions workflow? What is the difference between the env:, secrets:, and vars: contexts in GitHub Actions? How do you cache dependencies in GitHub Actions using actions/cache? How do you use matrix builds in GitHub Actions to test across multiple environments? How do you control job execution order in GitHub Actions using needs:? How do you share data between steps within a job using step outputs? How do you share build artifacts between jobs using actions/upload-artifact and actions/download-artifact? What are reusable workflows in GitHub Actions and how do you call them? What are composite actions and when should you choose them over reusable workflows? How do you set up a Docker container service for integration tests using services: in GitHub Actions? How do you use conditional steps with if: in GitHub Actions? What are the key GitHub Actions expression contexts and what information does each provide? How do you use concurrency groups to cancel outdated workflow runs in GitHub Actions? What is the GITHUB_TOKEN and what permissions does it have? How do you trigger one GitHub Actions workflow from another using workflow_run? How do you write a custom JavaScript action for GitHub Actions? How do you write a custom Docker container action for GitHub Actions? How do you implement a complete CI/CD pipeline for a container image in GitHub Actions — build, push to a registry, and deploy? How do you implement path filtering so a workflow only runs when specific files change? How do you debug failing GitHub Actions workflows — enabling debug logging and using tmate? How do you implement branch protection rules with required GitHub Actions status checks? How do you handle large monorepos with multiple services in GitHub Actions? What are OpenID Connect (OIDC) tokens in GitHub Actions and how do they replace long-lived cloud credentials? How do you prevent secret exposure and follow security hardening best practices in GitHub Actions? What are the key differences between GitHub Actions, Jenkins, and GitLab CI?
Show more question and Answers...

GitOps Interview Questions

Comments & Discussions

Interviews Questions

About Javapedia.net

Javapedia.net is for Java and J2EE developers, technologist and college students who prepare of interview. Also this site includes many practical examples.

This site is developed using J2EE technologies by Steve Antony, a senior Developer/lead at one of the logistics based company.

contact: javatutorials2016[at]gmail[dot]com

Kindly consider donating for maintaining this website. Thanks.

Copyright © 2026, javapedia.net, all rights reserved. privacy policy.

DMCA.com Protection Status