ci: build on native arm64 runners, pin actions to SHAs#10

Merged

loks0n merged 18 commits into

mainfrom

separate-arm-runners

May 12, 2026

Commits on May 12, 2026

ci: build on native arm64 runners, pin actions to SHAs

loks0n
and
claude
committed
ci: add Trivy CVE scan and Dive image-efficiency check

loks0n
and
claude
committed
fix: drop PHP 8.2 support

loks0n
and
claude
committed
ci: combine structure/dive/trivy into a single ci.yml workflow

loks0n
and
claude
committed
ci: rename build-and-push.yml to release.yml

loks0n
and
claude
committed
ci: build once, share via artifacts; add concurrency cancel

loks0n
and
claude
committed
ci: use docker/metadata-action; release promotes instead of rebuilds

loks0n
and
claude
committed
ci: release waits for CI run on the same commit before promoting

loks0n
and
claude
committed
ci: serialize release behind CI via shared concurrency group

loks0n
and
claude
committed
ci: tidy job/step names; install container-structure-test directly

loks0n
and
claude
committed
ci: split push/manifest into publish-sha.yml triggered by workflow_run

loks0n
and
claude
committed
ci: rename publish-sha.yml to publish.yml

loks0n
and
claude
committed
ci: drop dead deleted counter; use curl --fail on all HTTP calls

loks0n
and
claude
committed
ci: pin container-structure-test to v1.22.1

loks0n
and
claude
committed
ci: download container-structure-test from GitHub releases; update README

loks0n
and
claude
committed
ci: verify container-structure-test binary against upstream checksums

loks0n
and
claude
committed
ci: replace stale dive action with direct install; surface report

loks0n
and
claude
committed
ci: point --ci-config at the real filename

loks0n
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ci: build on native arm64 runners, pin actions to SHAs#10

ci: build on native arm64 runners, pin actions to SHAs#10
loks0n merged 18 commits into
mainfrom
separate-arm-runners

Commits on May 12, 2026

ci: build on native arm64 runners, pin actions to SHAs

ci: add Trivy CVE scan and Dive image-efficiency check

fix: drop PHP 8.2 support

ci: combine structure/dive/trivy into a single ci.yml workflow

ci: rename build-and-push.yml to release.yml

ci: build once, share via artifacts; add concurrency cancel

ci: use docker/metadata-action; release promotes instead of rebuilds

ci: release waits for CI run on the same commit before promoting

ci: serialize release behind CI via shared concurrency group

ci: tidy job/step names; install container-structure-test directly

ci: split push/manifest into publish-sha.yml triggered by workflow_run

ci: rename publish-sha.yml to publish.yml

ci: drop dead deleted counter; use curl --fail on all HTTP calls

ci: pin container-structure-test to v1.22.1

ci: download container-structure-test from GitHub releases; update README

ci: verify container-structure-test binary against upstream checksums

ci: replace stale dive action with direct install; surface report

ci: point --ci-config at the real filename