From 8d08f343c930f556c6ab016be9d00b23f1e516e3 Mon Sep 17 00:00:00 2001 From: Christian Cleberg Date: Wed, 15 Jul 2026 02:55:52 -0500 Subject: ci: publish multi-arch image to GHCR on release tags Build and push linux/amd64 + linux/arm64 images to ghcr.io/zerolabsco/skunky-art on every v* tag, with a signed provenance attestation. The Dockerfile cross-compiles from $BUILDPLATFORM, so the arm64 image builds without QEMU emulation. Default both compose examples to the published image and keep `build: .` commented out for building from a checkout, and extend dependabot to the github-actions and docker ecosystems. --- compose.vpn_example.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'compose.vpn_example.yml') diff --git a/compose.vpn_example.yml b/compose.vpn_example.yml index 701c96d..27cd488 100644 --- a/compose.vpn_example.yml +++ b/compose.vpn_example.yml @@ -48,7 +48,11 @@ services: skunkyart: container_name: skunkyart restart: unless-stopped - build: . + # Published multi-arch image; pin a release tag (e.g. :1.3.3) for + # reproducible upgrades. To build from this checkout instead, comment out + # `image:` and uncomment `build:`, then `docker compose up -d --build`. + image: ghcr.io/zerolabsco/skunky-art:latest + #build: . ports: - "127.0.0.1:3003:3003" security_opt: -- cgit v1.2.3