sencho

mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-07-26 11:49:16 +00:00

Files

T

Anso 3dc8199907 ci: publish a dev integration image on every push to main (#1343 )

Add docker-dev.yml: on each push to main (and manual dispatch) it builds
the multi-arch image, runs the same Trivy and smoke-test gates as the
release build, and pushes ghcr.io/studio-saelix/sencho-dev with the tags
:dev (moving) and :dev-<short-sha> (immutable), so a maintainer can pull
and test the exact artifact queued for the next release before it can
become a public release.

The integration path is GHCR-only and non-promotable: no Docker Hub, no
latest/semver tags, no cosign signing, no SBOM/VEX, and no GitHub Release.
All of that stays release-only in docker-publish.yml, driven by v* tags.
Least-privilege permissions (contents:read, packages:write) and no
production environment, so dev images publish automatically with no
Docker Hub credentials in scope.

Also add a clarifying header comment to docker-publish.yml noting it is
the release-only path.

2026-06-09 19:58:44 -04:00

ci.yml

chore(deps): bump the all-actions group across 1 directory with 2 updates (#1301 )

2026-06-04 16:21:55 -04:00

cla.yml

ci: harden CI and supply-chain pipeline (#1169 )

2026-05-23 02:37:29 -04:00

codeql.yml

chore(deps): bump the all-actions group across 1 directory with 2 updates (#1301 )

2026-06-04 16:21:55 -04:00

dependency-review.yml

chore(deps): bump the all-actions group across 1 directory with 2 updates (#1301 )