Embed git rev-parse in docker metadata labels

.github/workflows/docker-build.yml

@@ -29,7 +29,7 @@ jobs:
       # Build the Docker image using the Dockerfile
       - name: Build Docker image
         run: |
-          docker build --target runtime -t nv-ingest:latest .
+          docker build --target runtime --build-arg GIT_COMMIT=${GITHUB_SHA} -t nv-ingest:latest .
 
       - name: Run Pytest inside Docker container
         run: |

.github/workflows/docker-nightly-publish.yml

@@ -27,7 +27,7 @@ jobs:
       # Build the Docker image using the Dockerfile
       - name: Build Docker image
         run: |
-          docker build --target runtime -t ${{ secrets.DOCKER_REGISTRY }}/nv-ingest:${{ env.CURRENT_DATE }} .
+          docker build --target runtime --build-arg GIT_COMMIT=${GITHUB_SHA} -t ${{ secrets.DOCKER_REGISTRY }}/nv-ingest:${{ env.CURRENT_DATE }} .
 
       # Login to NGC
       - name: Log in to NGC Registry

.github/workflows/docker-release-publish.yml

@@ -27,7 +27,7 @@ jobs:
       # Build the Docker image using the Dockerfile
       - name: Build Docker image
         run: |
-          docker build --target runtime -t ${{ secrets.DOCKER_REGISTRY }}/nv-ingest:${{ env.SHORT_BRANCH_NAME }} .
+          docker build --target runtime --build-arg GIT_COMMIT=${GITHUB_SHA} -t ${{ secrets.DOCKER_REGISTRY }}/nv-ingest:${{ env.SHORT_BRANCH_NAME }} .
 
       # Login to NGC
       - name: Log in to NGC Registry

Dockerfile

@@ -13,6 +13,12 @@ ARG RELEASE_TYPE="dev"
 ARG VERSION=""
 ARG VERSION_REV="0"
 
+# Embed the `git rev-parse HEAD` as a Docker metadata label
+# Allows for linking container builds to git commits
+# docker inspect nv-ingest:latest | jq '.[0].Config.Labels.git_commit' -> GIT_SHA
+ARG GIT_COMMIT
+LABEL git_commit=$GIT_COMMIT
+
 # Install necessary dependencies using apt-get
 RUN apt-get update && apt-get install -y \
       wget \