Add debugging instrumentation

Author: iaingalloway

.github/actions/build-child-devcontainer/action.yaml

@@ -21,6 +21,10 @@ inputs:
   github-token:
     description: GitHub token
     required: true
+  debug-input-chain:
+    description: Enable extra debug logging for image tag input propagation and post-hook behavior
+    required: false
+    default: 'false'
 
 runs:
   using: composite
@@ -77,12 +81,20 @@ runs:
         echo "tags=$TAGS" >> $GITHUB_OUTPUT
       shell: bash
 
+    - name: Probe augmented tags in child action
+      if: inputs.debug-input-chain == 'true'
+      uses: ./.github/actions/debug-post-input
+      with:
+        source: build-child-devcontainer/${{ inputs.image }}/augment-tags
+        imageTag: ${{ steps.augment-tags.outputs.tags }}
+
     - name: Build image
       uses: ./.github/actions/build-devcontainer
       with:
         image: ${{ inputs.image }}
-        image-tags: ${{ steps.augment-tags.outputs.tags }}
+        resolved-tags: ${{ steps.augment-tags.outputs.tags }}
         base-image-tag: ${{ inputs.base-image-tag }}
         push-image: ${{ inputs.push-image }}
         registry: ${{ inputs.registry }}
         github-token: ${{ inputs.github-token }}
+        debug-input-chain: ${{ inputs.debug-input-chain }}

.github/actions/build-devcontainer/action.yaml

@@ -4,7 +4,7 @@ inputs:
   image:
     description: Name of the image to build
     required: true
-  image-tags:
+  resolved-tags:
     description: Comma-separated tags to apply to the image
     required: true
   push-image:
@@ -22,11 +22,20 @@ inputs:
   github-token:
     description: GitHub token
     required: true
+  debug-input-chain:
+    description: Enable extra debug logging for image tag input propagation and post-hook behavior
+    required: false
+    default: 'false'
 
 runs:
   using: composite
   steps:
 
+    - name: Persist resolved tags
+      run: |
+        echo "BUILDCONTAINER_RESOLVED_TAGS=${{ inputs.resolved-tags }}" >> $GITHUB_ENV
+      shell: bash
+
     - name: Log in to registry
       if: inputs.push-image == 'true'
       uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121
@@ -35,13 +44,20 @@ runs:
         username: ${{ github.actor }}
         password: ${{ inputs.github-token }}
 
+    - name: Probe tags in build-devcontainer
+      if: inputs.debug-input-chain == 'true'
+      uses: ./.github/actions/debug-post-input
+      with:
+        source: build-devcontainer/${{ inputs.image }}
+        imageTag: ${{ env.BUILDCONTAINER_RESOLVED_TAGS }}
+
     - name: Build devcontainer image
       uses: devcontainers/ci@b63b30de439b47a52267f241112c5b453b673db5
       env:
         BASE_IMAGE_TAG: ${{ inputs.base-image-tag }}
       with:
         imageName: ${{ inputs.registry }}/${{ github.repository }}/${{ inputs.image }}
-        imageTag: ${{ inputs.image-tags }}
+        imageTag: ${{ env.BUILDCONTAINER_RESOLVED_TAGS }}
         push: ${{ inputs.push-image == 'true' && 'always' || 'never' }}
         subFolder: ./src/${{ inputs.image }}
         cacheFrom: ${{ inputs.registry }}/${{ github.repository }}/${{ inputs.image }}

.github/actions/debug-post-input/action.yaml

@@ -0,0 +1,13 @@
+name: Debug post input
+description: Log selected action inputs in main and post
+inputs:
+  source:
+    description: Logical source label for this probe
+    required: true
+  imageTag:
+    description: Tag list to observe in main and post
+    required: true
+runs:
+  using: node24
+  main: main.js
+  post: post.js

.github/actions/debug-post-input/main.js

@@ -0,0 +1,5 @@
+const source = process.env.INPUT_SOURCE || "";
+const imageTag = process.env.INPUT_IMAGETAG || "";
+
+console.log(`[debug-post-input main] source=${source}`);
+console.log(`[debug-post-input main] INPUT_IMAGE_TAG=${imageTag}`);

.github/actions/debug-post-input/post.js

@@ -0,0 +1,5 @@
+const source = process.env.INPUT_SOURCE || "";
+const imageTag = process.env.INPUT_IMAGETAG || "";
+
+console.log(`[debug-post-input post] source=${source}`);
+console.log(`[debug-post-input post] INPUT_IMAGE_TAG=${imageTag}`);

.github/workflows/build-devcontainers.yaml

@@ -79,9 +79,10 @@ jobs:
         uses: ./.github/actions/build-devcontainer
         with:
           image: base
-          image-tags: ${{ needs.prepare-tags.outputs.tags }}
+          resolved-tags: ${{ needs.prepare-tags.outputs.tags }}
           push-image: ${{ github.event_name != 'pull_request' }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
+          debug-input-chain: true
 
       - name: Export base image for dependent jobs
         if: github.event_name == 'pull_request'
@@ -125,6 +126,7 @@ jobs:
           base-image-tag: ${{ needs.prepare-tags.outputs.base-image-tag }}
           push-image: ${{ github.event_name != 'pull_request' }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
+          debug-input-chain: true
 
   cleanup-workflows:
     name: Cleanup workflows