From 5d1ee94869de6128e1e40c0652c0028911494583 Mon Sep 17 00:00:00 2001
From: Quentin Laplanche <quentin.laplanche@docker.com>
Date: Mon, 24 Aug 2026 14:37:55 +0200
Subject: [PATCH] ci: replace registry container action reference

Use a local Docker container action so the runner still exercises its container-action mounts and environment without a docker:// workflow reference.

Signed-off-by: Quentin Laplanche <quentin.laplanche@docker.com>

Co-authored-by: Codex <noreply@openai.com>
---
 .github/actions/docker-pull/Dockerfile |  3 +++
 .github/actions/docker-pull/action.yml | 15 +++++++++++++++
 .github/workflows/ci.yml               |  7 +++----
 3 files changed, 21 insertions(+), 4 deletions(-)
 create mode 100644 .github/actions/docker-pull/Dockerfile
 create mode 100644 .github/actions/docker-pull/action.yml

diff --git a/.github/actions/docker-pull/Dockerfile b/.github/actions/docker-pull/Dockerfile
new file mode 100644
index 0000000..271176e
--- /dev/null
+++ b/.github/actions/docker-pull/Dockerfile
@@ -0,0 +1,3 @@
+FROM docker:29.3@sha256:4d90f1f6c400315c2dba96d3ec93c01e64198395cbba04f79d12adce4f737029
+
+ENTRYPOINT ["docker"]
diff --git a/.github/actions/docker-pull/action.yml b/.github/actions/docker-pull/action.yml
new file mode 100644
index 0000000..77ea1a5
--- /dev/null
+++ b/.github/actions/docker-pull/action.yml
@@ -0,0 +1,15 @@
+name: Pull Docker image
+
+description: Pull an image from a Docker container action
+
+inputs:
+  image:
+    description: Image reference to pull
+    required: true
+
+runs:
+  using: docker
+  image: Dockerfile
+  args:
+    - pull
+    - ${{ inputs.image }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 16369e0..2cc6693 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -106,11 +106,10 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       -
-        name: DinD
-        uses: docker://docker:29.3@sha256:4d90f1f6c400315c2dba96d3ec93c01e64198395cbba04f79d12adce4f737029
+        name: Pull test image from Docker CLI container action
+        uses: ./.github/actions/docker-pull
         with:
-          entrypoint: docker
-          args: pull ${{ env.GHCR_TEST_IMAGE }}
+          image: ${{ env.GHCR_TEST_IMAGE }}
       -
         name: Pull test image
         run: |