docker
diff --git a/‎.github/workflows/ci.yml‎
Lines changed: 8 additions & 1 deletion b/‎.github/workflows/ci.yml‎
Lines changed: 8 additions & 1 deletion
diff --git a/‎dist/index.js‎
Lines changed: 1 addition & 1 deletion b/‎dist/index.js‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎dist/index.js.map‎
Lines changed: 1 addition & 1 deletion b/‎dist/index.js.map‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎src/context.ts‎
Lines changed: 6 additions & 2 deletions b/‎src/context.ts‎
Lines changed: 6 additions & 2 deletions
@@ -694,6 +694,13 @@ jobs:
 
   allow:
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        buildx-version:
+          - v0.19.0-rc2
+          - v0.18.0
+          - v0.17.1
     steps:
       -
         name: Checkout
@@ -702,7 +709,7 @@ jobs:
         name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
         with:
-          version: ${{ inputs.buildx-version || env.BUILDX_VERSION }}
+          version: ${{ matrix.buildx-version }}
           driver-opts: |
             image=${{ inputs.buildkit-image || env.BUILDKIT_IMAGE }}
       -
 
@@ -83,9 +83,13 @@ async function getBakeArgs(inputs: Inputs, definition: BakeDefinition, toolkit:
     args.push(inputs.source);
   }
   if (await toolkit.buildx.versionSatisfies('>=0.17.0')) {
-    if (inputs.allow.length > 0) {
-      args.push('--allow', inputs.allow.join(','));
+    if (await toolkit.buildx.versionSatisfies('>=0.18.0')) {
+      // allow filesystem entitlements by default
+      inputs.allow.push('fs=*');
     }
+    await Util.asyncForEach(inputs.allow, async allow => {
+      args.push('--allow', allow);
+    });
   }
   await Util.asyncForEach(inputs.files, async file => {
     args.push('--file', file);
Original file line number	Diff line number	Diff line change
`@@ -83,9 +83,13 @@ async function getBakeArgs(inputs: Inputs, definition: BakeDefinition, toolkit:`
`83`	`83`	`args.push(inputs.source);`
`84`	`84`	`}`
`85`	`85`	`if (await toolkit.buildx.versionSatisfies('>=0.17.0')) {`
`86`		`- if (inputs.allow.length > 0) {`
`87`		`- args.push('--allow', inputs.allow.join(','));`
	`86`	`+ if (await toolkit.buildx.versionSatisfies('>=0.18.0')) {`
	`87`	`+ // allow filesystem entitlements by default`
	`88`	`+ inputs.allow.push('fs=*');`
`88`	`89`	`}`
	`90`	`+ await Util.asyncForEach(inputs.allow, async allow => {`
	`91`	`+ args.push('--allow', allow);`
	`92`	`+ });`
`89`	`93`	`}`
`90`	`94`	`await Util.asyncForEach(inputs.files, async file => {`
`91`	`95`	`args.push('--file', file);`